<!--#include file="connection.asp"-->

<% session("flagged1") = false %>
<%
dim xuid,xpass,checkpass
xuid = request("uid")
xpass = request("pass")

conn.open = connstring
set rs = conn.execute ( "Select count(admin_pass) from admin where admin_pass = '" & xpass & "' and admin_user = '" & xuid & "'")
if (len(xpass) = 0) or (len(xuid) = 0) then 
    	response.redirect "adminer_login.htm"
else
		if (rs(0) >= 1) then
			set rs = conn.execute ( "Select * from admin where admin_user = '" & xuid & "'")
			checkpass = rs("admin_pass")
			if not(xpass=checkpass) then 
	    		response.redirect "adminer_login.htm"
			end if
			session("adminuserid") = rs("admin_user")
			session("admin_id") = rs("admin_id")
			session("admin_group") = rs("admin_group")
			session("admin_level") = rs("admin_level")
			session("admin_email") = rs("admin_email")	
			session("admin_titulo") = rs("admin_titulo")
			session("admin_grupos") = rs("admin_grupos")
			response.redirect "mainadmin.htm"
		else
			Response.Redirect "adminer_login.htm"
		end if
end if
 
rs.close
set rs = nothing
conn.close
set conn = nothing
%>