<!--#include file="conn.asp"-->
修改為:<!-- #Include virtual="\conn.asp"-->
user=Replace(Request.Form("user"),"'","''")
修改為:user=Request("user")
pwd=Replace(Request.Form("pwd"),"'","''")
修改為:pwd=Request("pwd")
sql="select * from user where user='"&user&"' and pwd='"&pwd&"'"
修改為:sql="select * from user where user='" & user & "' and pwd='" & pwd & "'"
(註意:“"”號和“&”之間必須有空格!)
在<%end if%>的後面直接語句:
<%rs.close
set rs=nothing%>