<!--#includes virtual="/_private/global.inc.asp"-->
<%
On Error Resume Next

loginname = request.form("loginname")
loginpwd = request.form("loginpasswd")

if len(loginname) > 0 and len(loginpwd) > 0 then
	qry = "select * from login where (login = '" & loginname & "') and (password = '" & loginpwd & "')"
	Set rsExeclogin = Conn.execute(qry)

	'Session("s_id") = SESSION.SESSIONID
	Session("lastlogin") = now
	If Not rsExeclogin.EOF then		
		Session("loginname") = rsExeclogin("login")
		Session("loginpasswd") = rsExeclogin("password")
		if rsExeclogin("status") = "0" then
			Session("memberstatus") = "web-admin"
		elseif rsExeclogin("status") = "1" then
			Session("memberstatus") = "web-staff"
		end if
		Session("lastlogin") = now
		response.redirect "swdAdmin/default.asp"
	Else
		Session("loginname") = ""
		Session("loginpasswd") = ""
		Session("memberstatus") = ""
		response.redirect "login.htm"
	End if
else
	response.redirect "login.htm"
end if


if err then
response.write err.description
end if
%>