Editing: km_login_action.asp

<!--#INCLUDE FILE="ConnectDB.asp"--> <% usernamekm = Request.Form("txtusername") password = Request.Form("txtpassword") response.write username sql = "select * from student where login_name_s = '" & usernamekm & "' and password_s = '" & password & "'" Set ors = Server.CreateObject("ADODB.Recordset") ors.Open sql, Conn, 1, 3 'response.write sql if not ors.eof then 'result = ors(0) ' end if ' if result > 0 then Session("id_stu1") = usernamekm session("usernamekm")=usernamekm '�������Է��� 'response.write sql&"bbb" 'response.write session("id_lecturer1") 'response.write ors("surname") Response.redirect "add_km_stu_form.asp" else Session.abandon response.write username Response.redirect "index_km_stu.asp" end if ors.Close set ors = nothing %>