<%
if request("login")="yes" and session("nyeee_uid")="" then
uid=HtmlEncode(trim(request.form("hyname")))
pass=md5(HtmlEncode(trim(request.form("hypass"))))
if uid="" or pass="" then
response.write ""
response.end
else
sql="select * from user where uid='"&uid&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,connstr,1,1
if not rs.eof then
if pass=rs("pwd") then
if rs("mark")="1" then
session("nyeee_uid")=uid
session("nyeee_name")=rs("username")
response.redirect "user.asp"
else
response.write ""
response.end
end if
else
response.write ""
response.end
end if
else
response.write ""
response.end
end if
end if
else if session("nyeee_uid")<>"" then
response.redirect "user.asp"
end if
%>
