hive ud af database

jeg skal have hivet nogle bestemte oplysninger ud af en database, sådan at det kun er oplysningerne på den som er logget ind.. skal bruges til en opdaterings side... den første kode er kilde koden, den næste er funktionskoden....
kuntionskoderne ligger i roden, og den anden ligger i en mappe kaldet login

<---- Siden kode ---->
<%
SessionTjek()
%>
<HTML>
<HEAD>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<meta http-equiv="Content-Language" content="da">
<TITLE>Sport / Idræt - Medier</TITLE>
<script language="JavaScript">
<!--
// Ja, jeg hader javascript hvad angår vinduer (resize, popup m.v.),
// men følte det var den eneste udvej:) Så here it goes...

// Flytter vinduet til "Upper Left":)
//window.moveTo(0,0)

// Resizer vinduet til så meget det nu kan,
// og dækker over process-bjælken (mener det er det den hedder:)
//window.resizeTo(screen.width,screen.height)

// Hvis du føler ovenstående irriterende, så kommenter (eller slet)
// ovenstående kode, og fjern // fra nedenstående:
window.resizeTo(800,600)

// Hvis du føler du kan undvære javascriptet, så kan det sagtens slettes:)
-->
</script>
</HEAD>
<BODY BGCOLOR=#FFFFFF>
<TABLE WIDTH=741 BORDER=0 CELLPADDING=0 CELLSPACING=0 align="center" valign="middle">
<TR>
<TD>
<IMG SRC="images/spacer.gif" WIDTH=25 HEIGHT=1></TD>
<TD>
<IMG SRC="images/spacer.gif" WIDTH=1 HEIGHT=1></TD>
<TD>
<IMG SRC="images/spacer.gif" WIDTH=145 HEIGHT=1></TD>
<TD>
<IMG SRC="images/spacer.gif" WIDTH=25 HEIGHT=1></TD>
<TD>
<IMG SRC="images/spacer.gif" WIDTH=519 HEIGHT=1></TD>
<TD>
<IMG SRC="images/spacer.gif" WIDTH=26 HEIGHT=1></TD>
</TR>
<TR>
<TD COLSPAN=6><IMG SRC="images/over_01.gif" WIDTH=741 HEIGHT=21></TD>
</TR>
<TR>
<TD ROWSPAN=14><IMG SRC="images/over_02.gif" WIDTH=25 HEIGHT=484></TD>
<TD ROWSPAN=2><IMG SRC="images/over_03.gif" WIDTH=1 HEIGHT=70></TD>
<TD COLSPAN=3><IMG SRC="images/over_04.gif" WIDTH=689 HEIGHT=69></TD>
<TD ROWSPAN=14><IMG SRC="images/over_05.gif" WIDTH=26 HEIGHT=484></TD>
</TR>
<TR>
<TD COLSPAN=3><IMG SRC="images/over_06.gif" WIDTH=689 HEIGHT=1></TD>
</TR>
<TR>
<TD COLSPAN=4><IMG SRC="images/over_07.gif" WIDTH=690 HEIGHT=19></TD>
</TR>
<TR>
<TD COLSPAN=2><a href="mails.asp"><IMG SRC="images/over_08.gif" WIDTH=146 HEIGHT=31 border="0"></a></TD>
<TD ROWSPAN=11><IMG SRC="images/over_09.gif" WIDTH=25 HEIGHT=395></TD>
<TD ROWSPAN=11 background="images/over_10.gif" valign="top">
<form>
<table border="0" width="100%" cellspacing="0" cellpadding="0">
<tr>
<td width="100%" align="center" colspan="2">&nbsp;</td>
</tr>
<tr>
<td width="50%" align="center">Navn</td>
<td width="50%"></td>
</tr>
<tr>
<td width="100%" align="center" colspan="2">&nbsp;</td>
</tr>
<tr>
<td width="50%" align="center">Status</td>
<td width="50%"></td>
</tr>
<tr>
<td width="100%" align="center" colspan="2">&nbsp;</td>
</tr>
<tr>
<td width="50%" align="center">Brugernavn</td>
<td width="50%"></td>
</tr>
<tr>
<td width="100%" align="center" colspan="2">&nbsp;</td>
</tr>
<tr>
<td width="50%" align="center">Password</td>
<td width="50%"><input type="password" value=""></td>
</tr>
<tr>
<td width="100%" align="center" colspan="2">&nbsp;</td>
</tr>
<tr>
<td width="50%" align="center">E-mail*</td>
<td width="50%"><input type="text" value=""></td>
</tr>
<tr>
<td width="100%" align="center" colspan="2">&nbsp;</td>
</tr>
<tr>
<td width="100%" align="center" colspan="2">&nbsp;</td>
</tr>
<tr>
<td width="100%" colspan="2">
<p style="margin-left: 2; margin-right: 2">
&nbsp;* E-mailen er den e-mail som du bruger mest udenfor
  systemet, og som du vil være&nbsp;&nbsp; nemmest at blive kontaktet på.</p>
</td>
</tr>
</table>
</form>
</TD>
</TR>
<TR>
<TD COLSPAN=2><IMG SRC="images/over_11.gif" WIDTH=146 HEIGHT=19></TD>
</TR>
<TR>
<TD COLSPAN=2><a href="member.asp"><IMG SRC="images/over_12.gif" WIDTH=146 HEIGHT=31 border="0"></a></TD>
</TR>
<TR>
<TD COLSPAN=2><IMG SRC="images/over_13.gif" WIDTH=146 HEIGHT=20></TD>
</TR>
<TR>
<TD COLSPAN=2><a href="kampkort.asp"><IMG SRC="images/over_14.gif" WIDTH=146 HEIGHT=30 border="0"></a></TD>
</TR>
<TR>
<TD COLSPAN=2><IMG SRC="images/over_15.gif" WIDTH=146 HEIGHT=19></TD>
</TR>
<TR>
<TD COLSPAN=2><a href="bruger.asp"><IMG SRC="images/over_16.gif" WIDTH=146 HEIGHT=30 border="0"></a></TD>
</TR>
<TR>
<TD COLSPAN=2><IMG SRC="images/over_17.gif" WIDTH=146 HEIGHT=71></TD>
</TR>
<TR>
<TD COLSPAN=2><a href="logout.asp"><IMG SRC="images/over_18.gif" WIDTH=146 HEIGHT=30 border="0"></a></TD>
</TR>
<TR>
<TD COLSPAN=2><IMG SRC="images/over_19.gif" WIDTH=146 HEIGHT=19></TD>
</TR>
<TR>
<TD COLSPAN=2 background="images/over_20.gif" width="144" height="93" valign="top"></TD>
</TR>
<TR>
<TD COLSPAN=6><IMG SRC="images/over_21.gif" WIDTH=741 HEIGHT=25></TD>
</TR>
<TR>
<TD COLSPAN=6><IMG SRC="images/over_22.gif" WIDTH=741 HEIGHT=1></TD>
</TR>
</TABLE>
</BODY>
</HTML>


<---- Funktion ---->
<%
Response.Buffer = True

Set conn = server.createobject("ADODB.Connection")
Conn.open "DBQ="& server.mappath(".") &"/projekt.mdb; DefaultDir=DBQ="&
Server.mappath("/") &"; Driver={Microsoft Access Driver (*.mdb)};

REM diverse funktioner start
Function DatoVis(dato)
maned = Array(,"januar", "februar", "marts", "april", "maj", "juni", "juli", "august", "september", "oktober", "november", "desember")
ugedag = Array(,"Mandag", "Tirsdag", "Onsdag", "Torsdag", "Fredag", "L&oslash;rdag", S&oslash;ndag")
DatoVis = ugedag(Weekday(dato,2)) &"&nbsp;d.&nbsp;"& Day(dato)&".&nbsp;"& maned(month(dato)) &"&nbsp;"& Year(dato)
End Funktion

Funktion checklogin(brugernavn, password)
Set tjek = Conn.Execute("Select user_id From users WHERE user_brugernavn = '"& brugernavn &"' AND user_password = '"& password &"'")
  If tjek.EOF Then
  Response.write "Bruger ikke fundet"
Else
  Session("mail_login") = tjek("user_id")
  Response.Redirect(default.asp)
End if
End Funktion

Funktion sendmail(modtager, emne, body)
emnetjek = emne
bodytjek = body
  If emnetjek = "" Then emnetjek = "None"
  If bodytjek = "" Then bodytjek = "&nbsp;"
  SQL = "INSERT INTO mails (mail_owner, mail_from, mail_subject, mail_body) VALUES ("& modtager &", "& Session(mail_login) &", '"& emnetjek &"', '"& Replace(bodytjek, vbcrlf, "<br>") &"')"
  Conn.Execute(SQL)
  Response.Redirect(inbox.asp)
End Funktion

Funktion deletemail(mailid, ref_url)
If mailid = "" Then Response.Redirect(Right(ref_url, Len(ref_url)-1))
mails = Split(mailid,",",-1,1)
For a = 0 To Ubound(mails)
  Conn.Execute("UPDATE mails SET mail_deleted = True WHERE mail_id = "& mails(a) &" AND mail_owner = "& Session("mail_login") &"")
NEXT
Response.Resirect(Right(ref_url, Len(ref_url)-1))
End Funktion

Funktion username(user_id)
Set name = Conn.Execute("SELECT user_name FROM users WHERE user_id = "& Session("mail_login") &"")
username = uname("user_name")
End Funktion

Funktion Sessiontjek()
If  not Session("mail_login") > 0 Then Response.Redirect("login.asp")
End Funktion

Funktion sqlreplace(string)
sqlreplace = replace(streng,"'","''")
End Funktion
REM Diverse funktioner slut

Vismails=10
%>