<% if request("username")="" or request("password")="" then Response.Redirect Request.ServerVariables("HTTP_REFERER") Set uye = Server.CreateObject("ADODB.Recordset") sqlmm = "SELECT * FROM admin WHERE username='"&request("username")&"' and password='"&request("password")&"'" uye.Open sqlmm,Conn,3,3 if uye.recordcount>0 then session("logina")="1" else Response.Redirect Request.ServerVariables("HTTP_REFERER" ) end if Response.Redirect "edit.asp" %>