<%password=request.Form("secretcode") if request.QueryString("flag")<>"1" then if password<>"6014768" then response.Redirect("new-add/logon_wrong.htm") else response.Redirect("new-add/logon_right.asp") end if end if %>