<!--#include file="conn.asp"--> <% user=request.QueryString("user") pass=request.QueryString("pass") sqlcust=request.QueryString("sql") set rs=server.CreateObject("adodb.recordset") sql ="select * from theusers where name='"&user&"'" rs.open sql,conn,1,1 '确认密码 if (not rs.eof) Then If (rs("passw")=pass) then rs.close rs.open sqlcust,conn,1,1 Response.ContentType ="text/xml" response.write("<?xml version=""1.0"" encoding=""GB2312"" ?>") Const adPersistXML =1 Dim objXMLDOM Set objXMLDOM = Server.CreateObject("MSXML2.DOMDocument.3.0") rs.save objXMLDOM, adPersistXML Response.Write objXMLDOM.xml Set objXMLDOM=nothing Endif endIf rs.close Set rs=Nothing conn.close Set conn=nothing %>