% dim lgname,lgpwd,lgpwdmd5 lgname=replace(session(prefix&"lgname"),"'","") lgpwd=replace(session(prefix&"lgpwd"),"'","") if isnull(lgname) or lgname="" or isnull(lgpwd) or lgpwd="" then response.redirect"admincheck.asp" else lgpwdmd5=md5(lgpwd) if conn.execute("select top 1 bd from admin where name='"&lgname&"' and password='"&lgpwdmd5&"' and bd=0").eof then response.redirect"admincheck.asp" else end if end if %>