Login
%@LANGUAGE="VBSCRIPT"%> <% Dim rsLogin__strUser rsLogin__strUser = "xyz" if (Request.Form("name") <> "") then rsLogin__strUser = Request.Form("name") %> <% Dim rsLogin__strPwd rsLogin__strPwd = "123" if (Request.Form("pwd") <> "") then rsLogin__strPwd = Request.Form("pwd") %> <% set rsLogin = Server.CreateObject("ADODB.Recordset") rsLogin.ActiveConnection = MM_ChofUsers_STRING rsLogin.Source = "SELECT * FROM T_Users WHERE Name = '" + Replace(rsLogin__strUser, "'", "''") + "' AND Pwd = '" + Replace(rsLogin__strPwd, "'", "''") + "'" rsLogin.CursorType = 0 rsLogin.CursorLocation = 2 rsLogin.LockType = 3 rsLogin.Open() rsLogin_numRows = 0 %> <%If rsLogin__strUser <> "xyz" then if not rsLogin.EOF then session("svUser") = rsLogin("Name") If request.form("pg") = "resources" then response.redirect "resource_list.asp" else response.redirect "sunday_list.asp" end if else response.redirect "no_access.htm" end if end if %>
|
|