<%
set rs = server.CreateObject("ADODB.Recordset")
if request.Form("account")<> "" then
dim account
dim pwd
account = request.Form("account")
pwd = request.Form("pwd")
rs.Open "select account,isValidate,isAdmin,mid from members where account = '" & account & "' and pwd = '" & pwd & "'", con
if rs.EOF then response.Redirect "logon.asp"
session("account") = rs("account")
session("isvalidate") = rs("isValidate")
session("isadmin") = rs("isadmin")
session("mid") = rs("mid")
if session("isvalidate") <> true then response.Redirect "logon.asp"
response.Redirect "membersetting.asp"
end if
%>