% if request.querystring("action") = "login" then u_name = request("username") p_word = request("password") Set rs = Server.CreateObject("ADODB.Recordset") sql = "SELECT * FROM users WHERE u_username = '" & u_name & "' AND u_password = '" & p_word & "'" on error resume next set rs=conn.execute(sql) if rs.eof then login_msg = "Invalid username or password." else loginstatus = "Logon Successful" session("name") = rs("u_first") & " " & rs("u_last") session("cid") = rs("client_id") session("uid") = rs("user_id") session("permission_level") = rs("u_permission_level") session("valid_user") = true if rs("client_id") = 5 then session("kfin") = "yes" else session("kfin") = "no" end if rs.close set rs = nothing Set rs = Server.CreateObject("ADODB.Recordset") sql = "SELECT * FROM clients WHERE client_id = " & session("cid") on error resume next set rs=conn.execute(sql) session("client_company") = rs("client_company") rs.close set rs = nothing response.redirect("fileshare/content_announcements_b.asp") end if end if %>
![]() |
||||||||||||||||||||||||||
|
||||||||||||||||||||||||||