<%
option explicit
dim process,msg
process=Request.Form("process")
if process="login" then
dim cn
set cn=server.CreateObject("ADODB.CONNECTION")
cn.ConnectionString=application("cn")
cn.Open
dim com
set com=server.CreateObject("ADODB.COMMAND")
with com
.ActiveConnection=cn
.CommandText="SELECT * FROM CLIENT WHERE username=? AND password=?;"
.Parameters.append .createParameter("username",200,1,50,Request.Form("user"))
.Parameters.append .createParameter("password",200,1,50,Request.Form("pass"))
end with
dim rs
set rs=server.CreateObject("ADODB.RECORDSET")
set rs=com.Execute()
if rs.EOF then
msg="wrong username or password. please try again."
else
session("client_id")=rs("client_id")
session("client_name")=server.HTMLEncode(rs("client_name"))
session("project_description")=server.HTMLEncode(rs("project_description"))
session("last_updated")=server.HTMLEncode(rs("last_updated"))
session("username")=server.HTMLEncode(rs("username"))
rs.Close
cn.Close
Response.Redirect "client_main.asp"
end if
elseif process="logout" then
session("client_id")=""
session("client_name")=""
session("project_description")=""
session("last_updated")=""
session("username")=""
end if
%>
The Denali Group