********************************¼ļ********************************<br>&lt;%<br>dim&nbsp;sql<br>dim&nbsp;rs<br>dim&nbsp;username<br>dim&nbsp;password<br>username=replace(trim(request("username")),"'","")<br>password=MD5(replace(trim(Request("password")),"'",""))<br><br>set&nbsp;rs=server.createobject("adodb.recordset")<br>sql="select&nbsp;*&nbsp;from&nbsp;admin&nbsp;where&nbsp;password='"&password&"'&nbsp;and&nbsp;username='"&username&"'"<br>'response.write&nbsp;""&sql&""<br>'response.end<br>rs.open&nbsp;sql,conn,1,1<br>&nbsp;if&nbsp;not(rs.bof&nbsp;and&nbsp;rs.eof)&nbsp;then<br>&nbsp;if&nbsp;password=rs("password")&nbsp;then<br>session("admin")=rs("username")<br>session("flag")=rs("flag")<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Response.Redirect&nbsp;"right.asp"<br>&nbsp;else<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Response.Redirect&nbsp;"login.asp"<br>&nbsp;end&nbsp;if<br>else<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Response.Redirect&nbsp;"login.asp"<br>end&nbsp;if<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;rs.close<br>conn.close<br>set&nbsp;rs=nothing<br>set&nbsp;conn=nothing<br><br>%&gt;<br><br>********************************֤ûݵļ********************************<br><br>&lt;%<br>if&nbsp;session("admin")=""&nbsp;then<br>&nbsp;&nbsp;&nbsp;response.redirect&nbsp;"gb_login.asp"<br>elseif&nbsp;session("flag")&lt;&gt;2&nbsp;then<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;response.redirect&nbsp;"gb_login.asp"<br>end&nbsp;if<br>%&gt;<br><br>__________________________________________________________________________________<br>ע⣺flagǱݿġֵΪ2