<% option explicit Response.Buffer = true dim conn dim DSNtemp dim rs dim ssql dim storename_exist dim storename dim store_serial_number dim password if len(trim(Request.Form("storename"))) > 0 then storename = ucase(trim(Request.Form("storename"))) password = ucase(trim(Request.Form("password"))) '**************************************************** 'database connection string setting DSNtemp="DRIVER={Microsoft Access Driver (*.mdb)}; " DSNtemp=DSNtemp & "DBQ=" & server.mappath("db/dbServer.mdb") DSNtemp=DSNtemp & ";Password=790527145433" set conn = server.createobject("adodb.connection") conn.Open DSNtemp ssql = "select * from tbl_store where store_name = '" & storename & "'" set rs = server.CreateObject("adodb.recordset") rs.Open ssql,conn,3,3 if not rs.EOF then storename_exist = true store_serial_number = rs.Fields("store_serial_number") else storename_exist = false end if rs.Close conn.close set rs = nothing set conn = nothing if storename_exist = true then 'Response.Redirect "member/" & storename & "/admin.asp?store_serial_number=" & store_serial_number & "&storename=" & storename & "&password=" & password %>

<% else Response.Redirect "client.asp?msg=" & ucase(storename) & " NOT EXIST." end if else Response.Redirect "client.asp" end if %>