<% dim username,password,CheckCode username=replace(trim(request("txt_username")),"'","") password=replace(trim(Request("txt_userpass")),"'","") 'CheckCode=replace(trim(Request("CheckCode")),"'","") dim db,trs Set db=new Connections set trs=server.CreateObject("ADODB.recordset") login_sql="select * from ADMIN_USER where USER_PASS='"&password&"' and USER_NAME='"&username&"'" set trs=db.Query (login_sql,1) if not trs.EOF then session("USER_NAME")=trs("USER_NAME") session("U_Type")=trs("USER_RATING") session("S_login")="success" Response.Redirect "Main.asp" else Response.Write "" end If Set db=Nothing %>