asp用户登录程序

YPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w***3.org/TR/REC-html40/loose.dtd">

dim sql
dim rs
dim username
dim password
username=replace(trim(request.form("username")),"'","")
password=replace(trim(request.form("password")),"'","")
password=md5(password)
set rs=server.createobject("adodb.recordset")
sql="select * from [User] where LockUser=False and username='" & username & "' and password='" & password &"'"
rs.open sql,conn,1,1
if not(rs.bof and rs.eof) then
if password=rs("password") then
session("UserName")=rs("username")
'session("purview")=999
Response.Redirect "ment1."
end if
end if
rs.close
conn.close
set rs=nothing
set conn=nothing
%>