<%
if request.form("user")<>"" and request.form("psw")<>"" then
session("userid")=request.form("user")
session("pwd")=request.form("psw")
sql="select userid,pwd from tab_member where userid='"&session("userid")&"'"
set rs=conn.execute(sql)
if rs.eof then %>
<%
else
if rs("pwd")=session("pwd") then %>
<% else%>
<%
end if
end if
end if %>