Editing: webboard/login_action.asp

<!--#INCLUDE FILE="ConnectDB.asp"--> <% username = Request.Form("txtusername") surname = Request.Form("txtsurname") subject_no=request.form("subject_no") id_webboard=request.form("id_webboard") response.write username sql = "select * from username_ where username = '"&username&"' and surname = '"&surname&"'" Set ors = Server.CreateObject("ADODB.Recordset") ors.Open sql, Conn, 1, 3 if not ors.eof then result = ors(0) ' end if response.write result 'if result > 0 then Session("id_user") = ors("id_user") session("permiss")=ors("permiss") ors.Close set ors = nothing response.write id_webboard response.redirect "indexwebboard.asp" 'Response.redirect "indexanswer.asp?subject_no="&subject_no&"&id_webboard="&id_webboard&"" else Session.abandon response.write username Response.redirect "system_error.asp?err_id=02" end if %>