Editing: research/login_action.asp

<!--#INCLUDE FILE="ConnectDB.asp"--> <% username = Request.Form("txtusername") password = Request.Form("txtpassword") response.write "000000"&username sql = "select count(*) from s_user_acct where user_id = '" & username & "' and password = '" & password & "'" Set rs = Server.CreateObject("ADODB.Recordset") rs.Open sql, Conn, 1, 3 if not rs.eof then result = rs(0) end if rs.Close set rs = nothing if result > 0 then Session("login") = username Response.redirect "index.html" else Session.abandon response.write username Response.redirect "system_error.asp?err_id=02" end if %>