Editing: finance/login_action.asp.bak

<!--#INCLUDE FILE="ConnectDB.asp"--> <% username = Request.Form("username") password = Request.Form("password") response.write username 'if password="" then ' password="User" permis=1 ' Response.redirect "index_report_user.asp" 'else Set ors = Server.CreateObject("ADODB.Recordset") sql = "select * from user1 where username = '" & username & "' and password = '" & password & "'" ors.Open sql, Conn, 1, 3 if not ors.eof then result = ors(0) permis=ors("permis") session("permis")=permis if permis =0 then response.redirect ("index_user.asp") end if ors.Close set ors = nothing if result <> "" then Session("username") = username session("password")=password Response.redirect "index.asp" else Session.abandon response.write username Response.redirect "system_error.asp?err_id=02" end if 'end if %>