<%@ Language=VBScript %>
<% Response.Buffer = True %>
Carpenter's Time Systems
<% if (Session("PWOK") = "" ) AND (Request.Form("userid") = "" ) then %>
<%
Else
if Session("PWOK") = "" then
dim name, pw, cn, rs, stSQL
name = Request.Form("userid")
pw = Request.Form("passwd")
Set cn = Server.CreateObject("ADODB.Connection")
cn.Open "ctsds"
Set rs = Server.CreateObject("ADODB.Recordset")
strSQL = "SELECT RecKey, UserId, UserPW, Type, Class, FirstName, LastName, Status FROM Users"
On Error Resume Next
rs.Open strSQL, cn, adOpenStatic, adLockOptimistic
do until rs.EOF
If name = rs("UserId") AND pw = rs("UserPW") Then
Session("PWOK") = "OK"
Session("UserNo") = rs("RecKey")
if rs("Type") = "O" Then
Session("LEVEL") = "A"
Session("OWNER") = "Y"
else
Session("LEVEL") = rs("Type")
Session("OWNER") = "N"
end if
Session("Handle") = rs("FirstName") + " " + rs("LastName")
Exit Do
End if
rs.MoveNext
loop
rs.close
cn.close
Set rs = Nothing
Set cn = Nothing
end if
if Session("LEVEL") = "A" then
Response.redirect("menu.asp")
else
Response.redirect("downloads.asp")
end if
end if
%>
