% if session("user")="" then us=request.form("user") pa=request.form("password2") Set radmin = Server.CreateObject("ADODB.recordset") sql="select * from zhuce where userid='"&us&"'" radmin.open sql,conn if radmin.bof then response.redirect"bucunzai.htm" end if if radmin("password")<>pa then response.redirect"budui.htm" radmin.close end if session("user")=us end if %>