%@LANGUAGE="VBSCRIPT"%> <% If Request.Form("IsLogin") = "true" Then Dim rsUser Set rsUser = Server.CreateObject("ADODB.Recordset") rsUser.ActiveConnection = connSpringGarden rsUser.CursorLocation = 3 rsUser.CursorType = 3 rsUser.LockType = 3 rsUser.Source = "SELECT * FROM UserInfo WHERE Username = '" & Request.Form("Username") & "'" rsUser.Open If rsUser.EOF or rsUser.BOF Then rsUser.Close Response.Redirect("login.asp?login_error=true") Else If rsUser("Password") = Request.Form("Password") Then Session("Username") = Request.Form("Username") rsUser.Close Response.Redirect("photos.asp") Else rsUser.Close Response.Redirect("login.asp?login_error=true") End If End If End If %>
|
|
|