<%@ Language = "VBScript" %> <% Option Explicit Dim cnnLogin Dim rstLogin Dim strUsername, strPassword Dim strSQL %> <% If Request.Form("action") <> "validate_login" Then %>

Login:
Password:

<% Else strSQL = "SELECT * FROM tblLoginInfo " _ & "WHERE username='" & Replace(Request.Form("login"), "'", "''") & "' " _ & "AND password='" & Replace(Request.Form("password"), "'", "''") & "';" Set cnnLogin = Server.CreateObject("ADODB.Connection") cnnLogin.Open("DRIVER={Microsoft Access Driver (*.mdb)};" _ & "DBQ=" & Server.MapPath("login.mdb")) Set rstLogin = cnnLogin.Execute(strSQL) If Not rstLogin.EOF Then Response.Redirect("login_valid.asp") Else Response.Redirect("login_invalid.asp") 'Response.End End If ' Clean Up rstLogin.Close Set rstLogin = Nothing cnnLogin.Close Set cnnLogin = Nothing End If %>