<!--#include file="inc/connection.asp" -->
<%
	response.expires=-1
	username = Trim(Request("username"))
	password = Trim(Request("password"))
	username = replace(username,"'","''")
	password = replace(password,"'","''")
	
	set rs = Server.CreateObject("ADODB.Recordset")
	uyelersorgusu = "SELECT * FROM uyeler WHERE uye_adi='"&username&"' and uye_sifresi='"&password&"' "
	rs.open uyelersorgusu, conn

	if rs.eof then 
		Session("hatamesaji") = "Kullanıcı Bilgisi Hatalı"
	else
		Session("userid")=rs("ID")
		Session("username")=rs("uye_adi")
		Session("hatamesaji") = ""
	end if

	rs.close
	set rs = nothing
	conn.close
	set conn = nothing
%>