<%

 uid = Request.Form("uid") 
 pass = Request.Form("pass")
 
 if uid = "" then Response.redirect("error/empty.asp")
 if pass = "" then Response.Redirect("error/empty.asp")
 
 set conn = server.CreateObject ("ADODB.Connection")  
 conn.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & server.MapPath ("pro.mdb")
 set rs = server.CreateObject ("ADODB.Recordset")  
 rs.Open "SELECT * FROM admin where uid='"& uid &"'", conn, 1

 If rs.recordcount = 0 then
  rs.close
  conn.close
  set rs=nothing
  set conn=nothing
  Response.Redirect("login_id.asp")
 end if
 

 if rs("pass") = pass then
  Session("name") = rs("full")
  rs.Close
  conn.Close
  set rs=nothing
  set conn=nothing
  Response.Redirect("default.asp")
 else
  rs.Close
  conn.Close
  set rs=nothing
  set conn=nothing
  Response.Redirect("login_pw.asp")
 end if 

%>