Else's blog

  $query= sprintf("SELECT * FROM admin WHERE [user]=%s AND Pwd=%s",
          GetSQLValueString($_POST['name'], "text"),
        GetSQLValueString(md5($_POST['password']), "text"));
    $LoginRS = mssql_query($query);
  $loginFoundUser = mssql_num_rows($LoginRS);

  if ($loginFoundUser)
  {
    echo "<script>top.location.href='adminin.php';</script>";
    //echo $password;
    //echo "<br />输入的信息正确";
  }
  else
  {
    echo "<script>top.location.href='login.php';</script>";
    //echo $password;
    //echo "<br />输入的信息错了";
  }