<% admin=request("admin") password=md5(request("passa")) sql="select * from admin where uid='"&admin&"' and upwd='"&password&"'" set rs=server.createobject("adodb.recordset") rs.open sql,conn,1,1 if rs.eof then rs.close set rs=nothing conn.close set conn=nothing response.redirect "default.asp" response.end else response.cookies("lywl_adminuserid")=admin response.cookies("lywl_adminpassword")=password set rs=nothing conn.close set conn=nothing response.redirect "index.asp" response.end end if %>