%
set rs=server.createobject("adodb.recordset")
dim Username,Password
Username=Request.Form("Username")
Password=Request.Form("password")
if request("action")="login" then
if Username<>"" and Password<>"" then
sql="select * from [user] where [username]='"&Username&"' and [password]='" &md5(Replace_Text(Request.Form("password")))& "'"
rs.open sql,conn,1,1
if rs.eof then
Response.write""
Response.End
else
session("Manage")=rs("username")
response.write""
Response.End
end if
Else
Response.write""
Response.End
End If
rs.Close
set rs=Nothing
conn.Close
set conn=Nothing
End If
%>