<% If Session("user_id") = "" then %>
<%
IF Request("user_id") <> Empty THEN
user_id = Request("user_id")
password = Request("pass")
SET result = DbCon.Execute("Select * from member where id = '" & user_id & "' and partner_id='dreammech'")
If result.EOF Then
%>
<%
Else
If result("password") <> password Then
%>
<%
Else
Session("userType") = "member"
Session("user_id") = user_id
Session("user_name") = result("name")
Response.Redirect "list.asp"
%>
<%
End If
result.Close
Set result = Nothing
End If
End If
%>