<!--#include file=conn.inc-->
<% 
pass1=request("pass")
id=request("id")
user1=request("user1")

Set rs=Server.CreateObject("ADODB.Recordset")
sql="select * from user where id=1"
rs.open sql,conn

pass=rs("密码")
user=rs("用户名")
rs.close
set rs=nothing
if pass=pass1 and user1=user then
set rs=server.createobject("adodb.recordset")
sql="select * from book where ID="& id
rs.open sql,conn,1,3

rs.delete
set rs=nothing
conn.close
response.redirect "index.asp"
else
response.write "用户名或密码错误"
end if

%>