<%@ Language=VBScript %> <% ID=Request("ID") PWD=Request("PWD") strMsg=checklogin(ID,PWD) if strMsg="success" then Response.Redirect "investorinfo-fr-2.asp" elseif strMsg="wrong user name" then showstr="Enter your ID and password to sign in" elseif strMsg="wrong password" then showstr="wrong password" end if function checklogin(id,pwd) Set rs = Server.CreateObject("ADODB.Recordset") SQLstr = "SELECT * FROM member " & _ "WHERE ID = '" & ID & "'" rs.Open SQLstr, conn if rs.EOF then checklogin = "wrong user name" elseif rs("PWD") <> PWD then checklogin = "wrong password" else checklogin = "success" session("AAA")="Lin" session("BBB")="John" session("autoNo")=rs("autoNo") end if end function %>

		<%=showstr%> ID:   Password:

<% conn.close set conn=nothing %>