<%response.buffer=true%> <% b1=Trim(Request.form("a1")) b2=Trim(Request.form("a2")) b3=Trim(Request.form("a3")) b4=Trim(Request.form("us")) b5=Trim(Request.form("ps")) bk=Trim(Request.form("a4")) session ("n1")=b1 session ("n2")=b2 session ("n3")=b3 session ("n4")=b4 session ("n5")=b5 session ("n6")=bk sqlstr="select *from admin where Administrator='"+b4+"' and Password='"+b5+"';" rs.open sqlstr,conn if rs.bof and rs.eof then session ("n")=false response.redirect "back_dc1.asp" else session ("n")=true sqlthem="INSERT INTO wb VALUES('"+b1+"','"+b2+"','"+bk+"','"+b3+"')" conn.execute sqlthem response.redirect "back_dc.asp" RS.CLOSE CONN.CLOSE SET RS=NOTHING SET CONN=NOTHING end if %>