set rs = server.createobject("adodb.recordset") sql = "select * from news where UserName = '"&username&"'" rs.open sql,conn,1,3 if rs.eof and rs.bof then Response.write "<script>alert('没有这个用户名!');</script>" Response.End() else if rs("password") <> md5(password) then Response.write "<script>alert('密码错误!');</script>" Response.End() else Response.Redirect("main.asp") end if end if rs.Close Set rs=Nothing