<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#Include File="Include/connect.asp"-->
<!--#Include File="Include/md5code.asp"-->
<%
Username=Request.Form("Username")
Password=md5(Request.Form("Password"))
verifycode=Request.Form("verifycode")
if verifycode <> session("cnbruce.com_ValidateCode") then
Response.write("<script>alert('验证码不符！请返回重新输入');window.location.replace('login.asp');</script>")
Response.end()
end if
Set Rs = Server.CreateObject("ADODB.Recordset")
sql="select * from Show5_AdminUser where Username='"&Username&"' and Password='"&Password&"'"
rs.open sql,cn,1,1
if rs.bof or rs.eof then
	Response.write("<script>alert('用户名或密码错误！请返回重新输入');window.location.replace('default.asp');</script>")
	Response.End()
else
Session.Timeout = 30
session("AdminUserID")=rs("UserID")
session("AdminUsername")=rs("Username")
session("isadmin")="yes"
response.redirect "main.asp"
Response.End()
end if
%>