<% id=trim(request.form("user")) pwd=trim(request.form("pwd")) if isnumeric(id) then Set rs = Server.CreateObject("ADODB.Recordset") sql = "Select * FROM rg " rs.open sql,strconn,1,1 DO WHILE NOT rs.EOF user=trim(rs("id"))+1000 key=id-user if key=0 and pwd=trim(rs("pwd")) then session("id")=user session("pwd")=pwd response.redirect "myview.asp?id="&id 'response.redirect "myview.asp" response.end end if rs.movenext loop end if %>