<!--#include file="common.asp"-->

<%
	
	username=request.form("username")
	password=request.form("password")

	
	Sql="select * from customers where username=
'"+username+"' and password='"+password+"'"
	set con=getConnection()
	
	set rs=con.execute(sql)

	

	if not (rs.eof) then
	session("user")=rs(0)
	Response.redirect("confirm.asp")
	end if
	
	

	

	
	
%>

<!--#include file="menu.asp"-->

<p>Login Failed</p>
<p><a href="login.asp">Click here</a> to logon</p>