<%@Language=VBScript%>
<%
Response.Buffer = True
dim i
dim CssClass
dim FoundUser
dim Users()
dim Passwords()
dim Levels()
dim LoginUser
dim LoginPassword
dim Err_String
dim MyConn
dim RS
dim Connect_String
dim SQL
dim RedirectURL
dim J
%>
<%
Err_String = ""
On Error Resume next
if request.Form("act") = "n" Then
LoginUser = request.Form("User")
LoginPassword = request.Form("Password")
set MyConn = Server.CreateObject("ADODB.Connection")
MyConn.Open Connect_String
set RS = Server.CreateObject("ADODB.Recordset")
SQL = SQL & " SELECT `user_email` , `user-password` , `security_level` , `user_email` FROM `Fund Raisers`" & vbCrLf
SQL = SQL & " WHERE "
SQL = SQL & " user_email = '" & LoginUser & "'"
SQL = SQL & " AND `user-password` = '" & LoginPassword & "'"
RS.Open SQL, MyConn, 3, 1, 1
if Not RS.EOF Or Not RS.BOF Then ' username and password match - this is a valid user
Session("Fund_Raiser_Logon") = "TRUE"
Session("Fund_Raiser_UserLogon") = LoginUser
Session("Fund_Raiser_UserLevel") = RS(2)
RedirectURL = Session("Fund_Raiser_RedirectURL")
if (RedirectURL = "") then
RedirectURL = "./fund_raiser.asp"
end if
if Session("FirstRedirectURL") = "" then
Session("FirstRedirectURL") = RedirectURL
end if
Response.Clear
Response.Redirect(RedirectURL)
else
Err_String = "Login failed"
end if
elseif (UCASE(Session("Fund_Raiser_Logon")) = "FALSE") and (Session("Fund_Raiser_UserLogon") <> "") then
Err_String = "Permission failed"
end if
%>
Login To Fund Raisers
