%connstr="DRIVER={Microsoft Access Driver (*.mdb)};DBQ="+server.mappath("lj/lj.mdb")
set conn=server.createobject("ADODB.CONNECTION")
conn.open connstr%>
<%if request("ok")="dd" then
username=replace(trim(request("na")),"'","")
password=replace(trim(Request("pw")),"'","")
password=md5(password)
set rsur=server.createobject("adodb.recordset")
sqlur="select * from [bs_User] where username='" & username & "' and password='" & password &"'"
rsur.open sqlur,conn,1,1
userid=rsur("userid")
if not(rsur.bof and rsur.eof) then
if password=rsur("password") then
session("UserName")=rsur("username")
Response.Redirect "index.asp"
end if
rsur.close
conn.close
end if
end if
%>
北京晶雅石科技有限公司