Editing: login_action.asp

<!--#INCLUDE FILE="ConnectDB.asp"--> <% haha = Request.Form("txtusername") alowera = Request.Form("txtpassword") type_login=request.form("type_login") response.write haha response.write type_login Select Case type_login case 1 sql = "select * from lecturer where login_name_l = '" & haha & "' and password_l = '" & alowera & "'" response.write "lecturer" case 2 sql = "select * from student where login_name_s = '" & haha & "' and password_s = '" & alowera & "'" response.write "stu" case 3 sql = "select * from staff where login_name_st = '" & haha & "' and password_st = '" & alowera & "'" response.write "staff" end select Set ors = Server.CreateObject("ADODB.Recordset") ors.Open sql, Conn, 1, 3 ' login_name_l=ors("login_name_l") 'response.write login_name_l if not ors.eof then result = ors(0) end if ors.Close set ors = nothing if result > 0 then Session("id_lecturer1") = haha Session("id_stu1") = haha Session("id_staff1") = haha session("username")=haha '�������Է��� session("type_login")=type_login select case type_login case 1 ' Response.redirect "detail_lec.asp" Response.redirect "index_academic.asp" case 2 Response.redirect "detail_stu.asp" case 3 Response.redirect "index_academic.asp" end select else Session.abandon response.write haha Response.redirect "system_error.asp?err_id=02" end if %>