<%
admin_id=request("admin_id")
passwd=replace(trim(request("passwd")),"'","")

Set conn = Server.CreateObject("ADODB.Connection")
DBPath = Server.MapPath("../db/sjxffriend.asa")
conn.Open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DBPath
Set rs_admin = Server.CreateObject("ADODB.Recordset")
sql="select * from admin where admin_id like '" & admin_id & "' and passwd like '" & passwd & "'"
rs_admin.open sql,conn,3,2
if rs_admin.eof and rs_admin.bof then
   response.write "<script language='javascript'>"
   response.write "alert('ΥΛΊΕ»ςΓάΒλ΄νΞσ£‘');"
   response.write "history.go(-1);"
   response.write "</script>"
   response.end
end if

rs_admin.close
session("weight")="5"
response.redirect "admin_main.asp"
%>

<p>&nbsp;</p>

