// ---- login.asp
<%
if request.querystring("mode") ="opret" then
if request.form("opret") <> "" then
if not request.form("uName") <> "" then
UnAlert = "<font color='red'>*</font>"
Alert = "1"
else
uName = replace(trim(Request.Form("uName")),"'","")
UnAlert = ""
end if
if not request.form("uPass") <> "" then
UpAlert = "<font face='red'>*</font>"
Alert="1"
elseif not request.form("uPass") = request.form("uPassIgen") then
Up2Alert="<font color='red'>Passwords skal stemme overens</font>"
Alert="1"
else
uPass = replace(trim(Request.Form("uPass")),"'","")
UpAlert = ""
end if
if not request.form("email") <> "" then
UeAlert = "<font color='red'>*</font>"
Alert = "1"
else
uEmail = replace(trim(Request.Form("email")),"'","")
UeAlert = ""
end if
if Alert <> "1" then
set rs = server.createObject("adodb.connection")
conn = "DRIVER={Microsoft Access Driver (*.mdb)}; "
conn = conn & "DBQ=" & server.mappath("db.mdb")
rs.open conn
sql = "Select * from Tuser where UserID = '"& uName &"'"
set rs = rs.execute(sql)
if rs.EOF then
rs.close
set rs = server.createObject("adodb.connection")
rs.open conn
sql2 = "Select * from Tuser where Email = '"& uEmail &"'"
set rs = rs.execute(sql2)
if rs.EOF then
rs.close
set rs = server.createObject("adodb.connection")
rs.open conn
sql3 = "insert into Tuser(UserID, password, email) values('"&uName&"','"&uPass&"','"&uEmail&"')"
set rs = rs.execute(sql3)
Response.redirect("login.asp?id=oprettet")
else
Alert = "<font color='red'>Der findes allerede en bruger med denne email</font>"
end if
else
Alert = "<font color='red'>Der findes allerede en bruger med dette brugernavn</font>"
end if
else
if not Up2Alert <> "" then
Alert = "<font color='red'>Alle felter med * skal udfyldes</font>"
else
Alert = Up2Alert
end if
end if
end if
%>
<html>
<head>
<title>Opret bruger</title>
</head>
<body>
<form method="post" action="login.asp?mode=opret">
<div align="center">
<%=Alert%><br>
<table border="0" width="100%" cellspacing="0" cellpadding="3">
<tr>
<td>
<font FACE="'Tahoma',Arial" size="2"><%=UnAlert%>Vælg et brugernavn: </font><BR>
<input type="text" name="uName" value="<%=uName%>" size="15"><BR>
<font FACE="'Tahoma',Arial" size="2"><%=UpAlert%>Vælg et password: </font><BR>
<input type="password" name="uPass" size="15"><BR>
<font FACE="'Tahoma',Arial" size="2">Gentag password: </font><BR>
<input type="password" name="uPassIgen" size="15"><BR>
<font FACE="'Tahoma',Arial" size="2"><%=UeAlert%>Email: </font><BR>
<input type="text" name="email" value="<%=uEmail%>" size="15"><BR><BR>
<input type="submit" name="opret" value="Opret"><BR>
</font>
</table>
</div>
</form>
</body>
</html>
<%
elseif request.querystring("mode") = "glemtPass" then
if request.form("glemt") <> "" then
set rs = Server.CreateObject("ADODB.Connection")
conn = "DRIVER={Microsoft Access Driver (*.mdb)}; "
conn = conn & "DBQ=" & server.mappath("db.mdb")
uEmail = replace(trim(Request.Form("email")),"'","")
rs.open conn
sql = "select * from Tuser where email = '"&uEmail&"'"
set rs = rs.execute(sql)
if rs.eof then
Response.write "<center>Der findes ingen bruger med denne email"
response.write "<br><a href='login.asp?mode=opret'>Prøv igen</a></center>"
else
response.write "<center>Dit password er: <b>" & rs.fields("password") & "</b><br>"
response.write "<a href='login.asp'>Login</a><center>"
end if
else
%>
<html>
<head>
<title>Glemt password</title>
</head>
<body>
<table border="0" width="100%" cellspacing="0" cellpadding="3">
<tr>
<td>
<form method="post" action="login.asp?mode=glemtPass">
<font FACE="'Tahoma',Arial" size="2">Indtast email:</font><br> <input TYPE="text" name="email" size="15"><br><BR>
<INPUT TYPE="submit" NAME="glemt" value="send">
</form>
</td>
</tr>
</table>
</body>
</html>
<%
end if
else
if request.form("submit") <> "" then
session("Login") = ""
set rs = Server.CreateObject("ADODB.Recordset")
set MyConn = Server.CreateObject("ADODB.Connection")
conn = "DRIVER={Microsoft Access Driver (*.mdb)}; "
conn = conn & "DBQ=" & server.mappath("db.mdb")
Bruger = replace(trim(Request.Form("FBruger")),"'","")
Pass = replace(trim(Request.Form("FPass")) ,"'","")
SQL ="SELECT * FROM Tuser WHERE UserID = '" & Bruger & "'"
rs.Open SQL,conn
myConn.Open conn
'Undersøg om det er det rigtigt Password og send til loginsiden hvis det er forkert ellers sender den til Lektiesiden.
If rs.EOF Then
response.write "<a href='javascript.history.go(-1)'>Forkert login, prøv igen</a>"
Elseif rs("password") = pass Then
if request.form("box") <> "" then
response.cookies("login")("1") = Bruger
response.cookies("login").expires = Now() +365
end if
Session("Login") = Bruger
tallet = rs.Fields("Logins") + 1
upSQL="UPDATE Tuser SET logins = '"&tallet&"' WHERE UserID = '" & Bruger & "'"
Set Record = MyConn.Execute(upSQL)
Response.redirect("loggetind.asp")
Else
response.write "<font color=red>Forkert login<br>Prøv igen</font>"
End If
end if
%>
<html>
<head>
<title>Login</title>
<META NAME="Generator" CONTENT="Stone's WebWriter 3.5">
</head>
<br>
</div>
<div ALIGN="center">
<% if request.querystring("id") = "oprettet" then
response.write "Brugeren er oprettet<br><br>"
end if
%>
<FORM method="post" ACTION="login.asp">
<table border="0" width="100%" cellspacing="0" cellpadding="3">
<tr>
<td width="100%" class="small" align="left">
<form action="login.asp" method="POST">
<font FACE="'Tahoma',Arial" size="2">Brugernavn:<br>
<input type="text" name="FBruger" size="15" value=""><br>
Adgangskode:<br>
<input type="password" name="FPass" size="15" value=""><br>
<input type="checkbox" name="box" value="ON"> Automatisk login<br><br>
<input type="submit" name="submit" value="Login"><br><br>
<img src=brown_arrow.gif width=4 height=8 hspace=5 align=middle> <a href=login.asp?mode=glemtPass>Glemt password?</a><br><img src=brown_arrow.gif width=4 height=8 hspace=5 align=middle> <a href=login.asp?mode=opret>Bliv medlem</a></font>
</form>
</td>
</tr>
</table>
</body>
</html>
<% end if %>
// ---- End Login.asp ----
