<% if request.form("psw")<>"" then Set rs = Server.CreateObject("ADODB.RecordSet") strSQl=" WHERE psw='"&request.form("psw")&"' " strSQl="Select * From password" & strSQL rs.Open strSQl, Conn, adOpenKeyset, adLockOptimistic if not rs.eof then session("danica_loggedon")="fantastic4" rs.close Conn.close response.redirect "show.asp" elseif request.form("psw")=danicapassword then session("danica_loggedon")="387yutwuyt4i3r" rs.close Conn.close response.redirect "edit.asp" else rs.close Conn.close myerror="You have entered a wrong password." end if else myerror="" end if %>

Login

Please enter password to continue:

Password:

<%=myerror%>