<!--#include file="../conn/conn1.asp"-->
<!--#include file="../inc/MD5.asp"-->
<%
	  dim rs 
	  dim sql
	  dim user_name,user_password
	  user_name = replace(Trim(Request.Form("username")),"'","")
	  user_password =MD5(replace(Trim(Request.Form("password")),"'",""))
	 set rs=server.createobject("ADODB.recordset")
	 sql="select * from password where name='"&user_name&"' and pwd='"&user_password&"'"
	 rs.open sql,conn,1,1
	 if not(rs.bof and rs.eof) then
 		if user_password=rs("pwd") then
			session("userna")=rs("name")
			session("flag")=rs("flag")
			session("min")=rs("min")
                        Response.Redirect "admin.asp"
 		else
                Response.Redirect "login83.asp"
 		end if
	else	
                Response.Redirect "login83.asp"
	end if
        rs.close
	conn.close
	set rs=nothing
	set conn=nothing
	 %>
</body>
</html>
