<%
Dream_UserName=replace(session("Dream_UserName"),"'","")
if Dream_UserName="" then
	call CloseConn()
	response.redirect "login.asp"
	response.End()
end if
sql="select * from Dream_User where Dream_UserName='" & session("Dream_UserName") & "' and Dream_Password='" & session("Dream_Password") & "'"
set rs=conn.execute(sql)
if rs.eof and rs.bof then
  session("Dream_UserName")=""
  rs.close
  response.Redirect("login.asp")
  response.End()
else
Dream_UserPhone=rs("Dream_Phone")  
Dream_FullName=rs("Dream_FullName")
Dream_UserQQ=rs("Dream_QQ")
Dream_IdentityCard=rs("Dream_IdentityCard")
Dream_IdentityCard2=rs("Dream_IdentityCard2")
Dream_IdentityOK=rs("Dream_IdentityOK")
end if
%>