%
Response.Expires=0
if request("adname") <> "" then
adname=request("adname")
pas=request("pas")
sql="select * from ad where adname='"&adname&"' and pas='"&pas&"'"
set rs=server.createobject("adodb.recordset")
set rs=conn.execute(sql)
if not rs.EOF then
session("pas")="pas"
session("adname")=rs("adname")
response.redirect "adviewguest.asp"
else response.write ""
end if
else
%>