%
dim rs
dim sql
dim var_msg
dim action
dim rep_login
dim rep_password
action = request("action")
'-- submit --'
if action = "submit" then
rep_login = replace(request.form("rep_login"),"'","''")
rep_password = replace(request.form("rep_password"),"'","''")
set rs = createobject("adodb.recordset")
rs.open "select * from reps where rep_login='" & rep_login & "' " &_
"and rep_password='" & rep_password & "'",strDSN,3,1
if not rs.eof then
session("rep_id") = rs("rep_id")
rs.close
set rs = nothing
response.redirect "rep_menu.asp"
else
rs.close
set rs = nothing
response.redirect "rep_signin.asp?action=fail"
end if
end if
'-- messages --'
if action = "fail" then
var_msg = "
Account info not located - please try again
"
end if
%>
|
||