<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>
<%
' *** Validate request to log in to this site.
LoginAction = Request.ServerVariables("URL")
If Request.QueryString<>"" Then LoginAction = LoginAction + "?" + Server.HTMLEncode(Request.QueryString)
strLogin=CStr(Request.Form("Login"))
strPassword=CStr(Request.Form("password"))
If strLogin <> "" Then
'page the correct login takes you to
redirectLoginSuccess="downloads.asp"
redirectLoginFailed="login.asp?error=1"
Set sp_user_login = Server.CreateObject("ADODB.Command")
sp_user_login.ActiveConnection = dbCAS
sp_user_login.CommandText = "sp_login_user"
sp_user_login.CommandType = adCmdStoredProc
sp_user_login.Parameters.Append sp_user_login.CreateParameter ("@LoginName", adChar, adParamInput, 15)
'sp_user_login.Parameters.Append sp_user_login.CreateParameter ("@password", adChar, adParamInput, 15)
sp_user_login.Parameters("@LoginName") = strLogin
'sp_user_login.Parameters("@password") = strPassword
Set rsUser = Server.CreateObject("ADODB.Recordset")
Set rsUser = sp_user_login.Execute
If Not rsUser.EOF Then
if CStr(rsUser.Fields.Item("Password").Value) = strPassword and rsUser.Fields.Item("UserType").Value = 0 or rsUser.Fields.Item("UserType").Value = 3 then
' username and password match - this is a valid user
Session("Username") = strLogin
Set UserInfo = Server.CreateObject("ADODB.Recordset")
UserInfo.ActiveConnection = dbCAS
UserInfo.Source = "SELECT table_users.*, table_regions.regionID, table_logins.userType FROM table_users INNER JOIN table_logins ON table_users.LoginID = table_logins.loginID LEFT OUTER JOIN table_regions ON table_users.userID = table_regions.userID where table_users.LoginID = " & rsUser.Fields.Item("LoginID").Value
UserInfo.CursorType = 0
UserInfo.CursorLocation = 2
UserInfo.LockType = 1
response.Write(UserInfo.Source)
UserInfo.Open()
if not UserInfo.eof then
session("UserID") = UserInfo.Fields.Item("UserID").Value
session("firstName") = UserInfo.Fields.Item("firstName").Value
Session("UTYPE") = CStr(UserInfo.Fields.Item("userType").Value)
session("regionID") = UserInfo.Fields.Item("RegionID").Value
Response.Redirect(redirectLoginSuccess)
else
response.Write("ad user id")
end if
end if
End If
rsUser.Close
Response.Redirect(redirectLoginFailed)
ELSE
session.Contents.RemoveAll()
session.Abandon()
End If
%>
Intuto - flexible learning solutions
