Email1 = Replace(Request.Form("Email"), "'", "''")
Email2 = Replace(Request.Form("Email"), "'", "''")
Pass = Replace(Request.Form("Pass"), "'", "''")
Email1 = false: Email2 = false
sql1 = "SELECT Email, pass FROM tabella1 WHERE Email = '" & Email1 & "' AND pass = '" & Pass & "'"
Set rs1 = Server.CreateObject("ADODB.Recordset")
Set rs1 = conn.Execute(sql1)
if not rs1.EOF then
Email1 = true
sql2 = "SELECT Email, pass FROM tabella2 WHERE Email = '" & Email2 & "' AND pass = '" & Pass & "'"
Set rs2 = Server.CreateObject("ADODB.Recordset")
Set rs2 = conn.Execute(sql2)
if not rs1.EOF then
Email2 = true
end if
set rs2 = nothing
end if
set rs1 = nothing
if Email1 and Email2 then
response.redirect("scegli.asp")
else
response.redirect("oralorposter.asp")
end if