pass.asp

管理server的檔案....及訂購產品的檔案

<%
User = request("User")
Pwd = request("Pwd")
Action = request("Action")
'--------------------------------------------------
If User <> "" And Action = "ChkPass" Then
   set conn=Server.CreateObject("ADODB.Connection")
   param = "driver={Microsoft Access Driver (*.mdb)}"
   conn.Open param & ";dbq=" & Server.MapPath("ArtDatabase.mdb")
   set rs=Server.CreateObject("ADODB.Recordset")
   tkey = "'" & replace(replace(User&"","'","''"),"[","[[]") & "'"
   sqlstr="select * from [