<% Set rs = Server.CreateObject("ADODB.Recordset") sele="select * from login" rs.Open sele,conn,3,2 if ((request.form("loginname")=rs("user")) and (request.form("password")=rs("password"))) then session("login")="login" %>