Session

Suk! Jeg har lavet mit login om, sådan at det kører via tabel i Access i stedet for at have users og passwords hard codet.

Jeg har et domæne, lad os kalde det www.akakak.dk og noget diskplads samtidig på en anden server, lad os kalde den/det 194.se.rv.er/mappe

www.akakak.dk indeholder blot 2 frames (*,1), dvs. med en redirect til 194.se.rv.er/mappe

Jeg har lavet nedenstående kode (access.asp), som ligger på 194.se.rv.er

Hvis jeg kalder access.asp direkte fra serveren, virker det fint, men hvis det er via domænet, virker det imidlertid ikke!

Er det noget med en cookie, der ligger et forkert sted? Skal jeg have defineret noget med Session_OnStart eller er det noget helt andet?

access.asp, som den ser ud....

<% response.buffer = true %>

<html>
<head>
<title>Login-ASP</title>
<link rel="stylesheet" href="layout/2.css" type="text/css" media="screen">
<link rel="stylesheet" href="layout/2p.css" type="text/css" media="print">
</head>
<body onload="document.loginform.login.focus();">
<div id="menu">
<!--#include virtual="/mappe/menu.asp"-->
</div>
<%
if Request.form("login") = "" or Request.form("password") = "" then
Response.Write "<h1>Login</h1>"
Response.Write "<table border='1px' cellpadding='2' cellspacing = '0' width='250px'>"
Response.Write "<tr>"
Response.Write "<form method='post' action='access.asp' name='loginform'>"
Response.Write "<th id='fed' align='left' width='100'>Login-ID:</th>"
Response.Write "<th id='fed' align='left' width='100'>Password:</th>"
Response.Write "<th id='fed' width='50'>&nbsp;</th></tr>"
Response.Write "<tr><td><input type='text' name='login'></td>"
Response.Write "<td><input type='password' name='password'></td>"
Response.Write "<td><input type='submit' value='Login'></td></tr>"
Response.Write "</form>"
Response.Write "</table>"

else

f_init = Request.form("login")
f_pw = Request.form("password")

Set Conn = Server.CreateObject("ADODB.Connection")
strConnect = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.Mappath("/mappe/database/user.mdb")&";"
Conn.Open strConnect

strSQL = "Select Count(*) as findesuser from users WHERE init = " & "'" & f_init & "'"
Set rs = Conn.Execute(strSQL)

if (rs("findesuser") <> "1") then
Response.Write "<h1>Ukendt Login-ID!</h1>"
Response.Write "<table border='1px' cellpadding='2' cellspacing = '0' width='250px'>"
Response.Write "<tr>"
Response.Write "<form method='post' action='access.asp' name='loginform'>"
Response.Write "<th id='fed' align='left' width='100'>Login-ID:</th>"
Response.Write "<th id='fed' align='left' width='100'>Password:</th>"
Response.Write "<th id='fed' width='50'>&nbsp;</th></tr>"
Response.Write "<tr><td><input type='text' name='login'></td>"
Response.Write "<td><input type='password' name='password'></td>"
Response.Write "<td><input type='submit' value='Login'></td></tr>"
Response.Write "</form>"
Response.Write "</table>"

rs.Close
Set rs = Nothing

Conn.Close
set Conn = Nothing

else

rs.Close
Set rs = Nothing

strSQL1 = "Select * from users WHERE init = " & "'" & f_init & "'"
Set rs1 = Conn.Execute(strSQL1)

if f_pw <> rs1("pw") then
Response.Write "<h1>Forkert password!</h1>"
Response.Write "<table border='1px' cellpadding='2' cellspacing = '0' width='250px'>"
Response.Write "<tr>"
Response.Write "<form method='post' action='access.asp' name='loginform'>"
Response.Write "<th id='fed' align='left' width='100'>Login-ID:</th>"
Response.Write "<th id='fed' align='left' width='100'>Password:</th>"
Response.Write "<th id='fed' width='50'>&nbsp;</th></tr>"
Response.Write "<tr><td><input type='text' name='login'></td>"
Response.Write "<td><input type='password' name='password'></td>"
Response.Write "<td><input type='submit' value='Login'></td></tr>"
Response.Write "</form>"
Response.Write "</table>"

rs1.Close
Set rs1 = Nothing

Conn.Close
set Conn = Nothing

else
Session("login") = "JA"
Session("loginid") = rs1("init")
Session("mappe") = rs1("mappe")
Session("discoteket") = rs1("discoteket")
Session("email") = rs1("email")
Session("alt_email") = rs1("alt_email")
Session.Timeout = 20
Response.Redirect ("/mappe/start.asp")

end if
end if
end if
%>
<hr>
<!--#include virtual="/mappe/address.htm"-->
</body>
</html>