<!--#include file="inc/conn.asp"-->
<!--#include file="inc/safe.asp"-->
<!--#include file="inc/md5.asp"-->
<%
dim f_user,f_pass
f_user=trim(ReplaceBadChar(request.Form("userid")))
f_pass=md5(trim(ReplaceBadChar(request.Form("userpass"))))
set rs=server.CreateObject("adodb.recordset")
			rs.open"select * from sd_hj where hjid='"&f_user&"' and hjpass='"&f_pass&"'",conn,1,1
			if  rs.eof and rs.bof then
			response.Write("<script>alert(""用户名或密码错误，请重新确认输入"");history.go(-1);</script>")
			response.end
			end if


session("areaname")=rs("hjid")
session("areapass")=rs("hjpass")
session("hjid")=rs("id")
rs.close
set rs=nothing

conn.close
set conn=nothing
response.Redirect("area/index.asp")
%>