<%
dim user
dim pwd

if request("action")="login" then
user=request.form("username")
pwd=request.form("password")
if username="" or password="" then
 Response.Write("<script language=javascript>alert(‘请输入用户名和密码！‘);javascript:history.back();</script>")
 end if
set rs=server.createobject("ADODB.Recordset")
sql="select * from member where username1=‘"&user&"‘ and password=‘"&pwd&"‘"
rs.open sql,conn,1,3
response.write(sql)
response.end()

If Not rs.Eof Then
   session("member")=rs("user") 
   rs.update
   response.Redirect "member.asp"
   rs.close
   set rs=nothing
else 
   rs.close
   set rs=nothing
   Response.Write("<script language=javascript>alert(‘您输入的用户名或密码不正确!‘);history.back(1);</script>")
end if

end if
%>