<%response.CacheControl="No-Cache"%>
<%
if trim(request.form("username")) <> "" and trim(request.form("password")) <> "" then
set rs =server.CreateObject("adodb.recordset")
sql ="select * from login where muid ='"&request("username")&"' and mpwd ='"&request("password")&"' "
rs.open sql,con,3,3
if rs.eof =false then
flag ="true"
' session("username")=rs("muid")
session("uid2")=rs("muid")
' response.write "done"
response.redirect("intranet.asp")
else
flag ="false"
'response.write "
Your UserName or Password is Invalid
"
end if
rs.close
con.close
set rs=nothing
set con=nothing
end if
%>
Untitled Document