chkadmin.asp

采用三级目录

<!--#include file=conn.asp-->
<%
	dim sql
	dim rs
	dim username
	dim password
	username=replace(trim(request("username")),"'","")
	password=replace(trim(Request("password")),"'","")

	set rs=server.createobject("adodb.recordset")
	sql="select * from admin where password='"&password&"' and username='"&username&"'"
'	response.write ""&sql&""
'	response.end
	rs.open sql,conn,1,1
 	if not(rs.bof and rs.eof) then
 		if password=rs("password") then
			session("admin")=rs("username")
			session("flag")=rs("flag")
			Response.Redirect "manage.asp"
 		else
			call Error
 		end if
	else
		call Error()
	end if

	sub Error()
Response.Write "<script>window.alert('身份确认失败！用户名或密码错误！');window.location='admin.asp';</script>"     
	end sub
	rs.close
	conn.close
	set rs=nothing
	set conn=nothing

%>