<%
if request.form("submit") = "login" then
user1 = request.form("username")
pass1 = request.form("password")
set rsP = conn.execute("select * from Config where name = 'Pass'")
pass = rsP("content")
rsP.close
set rsP = nothing
set rsU = conn.execute("select * from Config where name = 'User'")
user = rsU("content")
rsU.close
set rsU = nothing
if user = user1 and pass = pass1 then
session("USER") = "Admin"
Session.Timeout=30
response.redirect("ebay.asp")
else
response.redirect("index.asp?err=1")
end if
end if
if request.querystring("func") = "logoff" then
session("USER") = ""
response.redirect("index.asp")
end if
%>
eBay - Admin
<%if session("USER") = "Admin" then%>