<% CONNSTR="DBQ="+SERVER.MAPPATH("CONTACT.MDB")+";DEFAULTDIR=;DRIVER={MICROSOFT ACCESS DRIVER (*.MDB)};" SET CONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") CONN.OPEN CONNSTR ADMIN=TRIM(REQUEST.FORM("ADMIN")) PASSWORD=TRIM(REQUEST.FORM("PASSWORD")) IF ADMIN="" THEN RESPONSE.REDIRECT "login.asp" END IF IF PASSWORD="" THEN RESPONSE.REDIRECT "login.asp" END IF SET RS=SERVER.CREATEOBJECT("ADODB.RECORDSET") SQL="SELECT * FROM ADMIN WHERE ADMIN='"&ADMIN&"'" RS.OPEN SQL,CONN,1,1 IF NOT RS.EOF THEN IF PASSWORD=RS("PASSWORD") THEN SESSION("ADMIN")="YES" RESPONSE.REDIRECT "list.asp" ELSE RESPONSE.REDIRECT "login.asp" END IF ELSE RESPONSE.REDIRECT "login.asp" END IF RS.CLOSE CONN.CLOSE %>