<%
if request("admin_name")<>"" and request("admin_pw")<>"" then
dim name
dim pwd
dim sql
dim rs
name=request.form("admin_name")
pwd=request.form("admin_pw")
if instr(name,"'")<>0 or instr(pwd,"'")<>0 then
response.redirect "login.asp"
response.end
end if
set rs = server.createobject("adodb.recordset")
sql="select * from shop where shop_id='" & name & "' and shop_pw='" & pwd & "'"
rs.open sql,conn,1,1
if err.number <> 0 then
response.write "数据库操作失败："&err.description
response.end
else
if not rs.eof and not rs.bof then
session("shop_purview")="99998"
session("shop_id")=rs("shop_id")
session("shop_name")=rs("shop_name")
response.redirect "main.asp"
end if
end if
rs.close
set rs=nothing
conn.close
set conn=nothing
end if
%>
