%@LANGUAGE="VBSCRIPT"%> <% Response.Expires=-1000 Response.CacheControl="no-cache" 'MagicBeat Server Behavior - 1019 - by Jag S. Sidhu - www.magicbeat.com %> <% Dim connrealestate__strUserID connrealestate__strUserID = "x" if (Request.Form("UserID") <> "") then connrealestate__strUserID = Request.Form("UserID") %> <% Dim connrealestate__strPassword connrealestate__strPassword = "1" if (Request.Form("Password") <> "") then connrealestate__strPassword = Request.Form("Password") %> <% set connrealestate = Server.CreateObject("ADODB.Recordset") connrealestate.ActiveConnection =MM_connrealtor_STRING connrealestate.Source = "SELECT * FROM users WHERE UserID = '" + Replace(connrealestate__strUserID, "'", "''") + "' AND Password = '" + Replace(connrealestate__strPassword, "'", "''") + "'" connrealestate.CursorType = 0 connrealestate.CursorLocation = 2 connrealestate.LockType = 3 connrealestate.Open() connrealestate_numRows = 0 %> <% If connrealestate__strUserID <> "x" Then If Not connrealestate.EOF Then Session("svUser")=connrealestate.Fields.Item("UserID").Value Session("svPass")=connrealestate.Fields.Item("Password").Value Session("svAccess")=connrealestate.Fields.Item("AccessGroup").Value Response.Redirect "admin_loginok.asp" else Response.Redirect "admin_loginfailed.asp" End If End If %>