%@ LANGUAGE="VBSCRIPT" %> <% Dim conn,recordSet,sqlstr,flag if (Request("Submit")="Login") Then Set conn = Server.CreateObject ("ADODB.Connection") conn.Open "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & Server.MapPath("indreshdatabase.mdb") & ";" Set recordSet = Server.CreateObject("ADODB.Recordset") 'if((""+username)="undefined") Then ' username=null ' if((""+dest)="undefined") Then ' dest=null ' if((dest=null)||(dest="")) Then ' dest="authorised.html" ' if((username <> null)&&(username <>""))Then ' if(flag="yes")Then ' Response.Cookies("username")=username ' if(username="admin")Then ' Response.Redirect("admin.asp") ' end if ' else ' Response.Redirect(dest) ' Response.Write(yes) ' end if ' end if ' end if ' end if 'end if flag="no" if(flag="yes")Then Response.Cookies("username")=username if(username="admin")Then Response.Redirect("admin.asp") end if else Response.Redirect("authorised.html") Response.Write(yes) end if if Session("id") = "" or Request.Form("username") <> "" then Session("id") = "" sqlstr="SELECT id,password from userlogin WHERE id = '" & Request.Form("username") &"' AND password = '" & Request.Form("password") &"';" Set recordSet = conn.Execute(sqlstr) if not recordSet.EOF then Session("id") = Request.Form("username") Response.Redirect "authorised.html" else Response.Redirect "login_indnew11.asp" end if end if end if %>