<% @language ="javascript" %>
<%
if (Request("submitName")== "Login"){

var DSN = "DSN=database";
var Conn = Server.CreateObject("ADODB.Connection");
Conn.Open(DSN);

rs = Server.CreateObject("ADODB.Recordset");

sql = "SELECT * FROM login WHERE " + "username='" + Request("userLogin") + "' AND " + "password='" + Request("userPassword") + "'";

rs.Open(sql,Conn);

if (rs.EOF){
rs.Close();
rs = null;
Conn.Close();
Conn = null;

Response.Redirect("relogin.asp");
}

else{
rs.Close();
rs = null;
Conn.Close();
Conn = null;
Session("sesi") = "OK";
Response.Redirect("/pharmacy/user/userIndex.asp");

}
}
else{

%>