<%
If Session("MyUserName")="" or Session("MyPassWord")="" Then
Response.Redirect "Login.asp" 
End if
Set rs=Server.CreateObject("Adodb.Recordset")
Sql="Select * From [User] Where [UserName]='"&Session("MyUserName")&"' and [PassWord]='"&Session("MyPassWord")&"' "
rs.Open Sql,Conn,1,1
If rs.Eof or rs.Bof Then
Response.Redirect "Login.asp" 
End if
%>