<% user = request.form("user") password=request.form("password") session("Login")=false sqlstr="select* from admin where user='"&user&"' and password='"&password&"'" set rs=server.CreateObject("ADODB.recordset") rs.open sqlstr,conn,1,1 if rs.eof and rs.bof then %> <% else session("Login")=true session.Timeout=5 %> <%end if rs.close set rs=nothing conn.close set conn=nothing%>