:) tak i er hurtig..
Menn.. der er stadig et problem hvis jeg nu bruger den på min forside, så kan siden ikke loades.. ?
men planen er at kun det som står mellem koden ikke må se, før man loger-ind
jeg sender lige de koder som jeg bruger..
<<<<Default.asp>>>>
<%
if session("login") = "" Then
Response.redirect("login.asp")
end if
%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML>
<HEAD>
<TITLE>Secured Page</TITLE>
</HEAD>
<BODY bgcolor="#000000">
<center>
<h1><font color="#cac9ab"> <<< Du er nu Admin på pubben >>> </h1><br><br>
<br>
<br>
</center>
<table width="290" align="center" bgcolor="#666666" cellspacing="1" cellpadding="0"><tr><td><table width="100%" align="center" cellpadding="10" bgcolor="#b3d68e"><tr>
<td><p>Du Har nu muligheden for at :</p>
<p>1: Tilføje/Ret/Slet Nyheder</p>
<p>2: Tilføje/Ret/Slet Billeder</p>
<p>3: Chat Admin Kick / nulstil Chat området</p>
<p> <strong>Kuklinski</strong> says : HAVE A NICE DAY ! </p> </td>
</tr></table></tr></td></table>
<center>
<br>
</center>
</BODY>
</HTML>
<<<<Login>>>>>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML>
<HEAD>
<TITLE>Login</TITLE>
</HEAD>
<BODY bgcolor="#000000">
<%
SET RS = Server.CreateObject("ADODB.Connection")
rs.Open "Driver={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.MapPath("usersystem.mdb")
If Request("mode") = "Check" then
' Authes user, password, and fixed a known securitybug to many login systems.
strUsername = Trim(Replace(request("username"),"'","''" ))
strPassword = Trim(Replace(request("password"),"'","''" ))
Sql = "Select Count(*) as Found from users where (username = '" & strUsername & "') and (password ='" & strPassword & "')"
Set LO = RS.Execute(Sql)
if LO("Found") = 0 then
Session("login") = ""
error = "You´re not authed be the system"
else
strDSN = "DRIVER={Microsoft Access Driver (*.mdb)};DBQ=" & Server.MapPath("usersystem.mdb")
Set myConn = Server.CreateObject("ADODB.Connection")
myConn.Open strDSN
strSQL = "SELECT * FROM users where (username = '" & Request("username") & "') and (password ='" & Request("password") & "')"
Set ez = myConn.Execute(strSQL)
Session("login") = "Authed"
Response.Redirect "default.asp"
EZ.Close
RS.Close
Conn.Close
End if
End if
%>
<br>
<center>
<form method="POST" action="login.asp">
<input type="hidden" name="mode" VALUE="Check">
<h1><font color="#cac9ab">Kræver Admin rettigheder</h1>
<p><br>
<br>
<font face="verdana" size="2">Username:</font>
<input class='text' type='text' name='username' size='15' style='font-family: Verdana; font-size: 8 pt' value="<%=strbrugernavn%>">
<br>
<font class="header">
<font face="verdana" size="2">Password: </font>
<input class="text" type="password" value="<%=strpassword%>" name="password" size="15" style="font-family: Verdana; font-size: 8 pt">
</font><br>
<input class="text" type="submit" value="Login" name="submit" style="font-family: Verdana; font-size: 8 pt">
</font>
<br>
<br>
<%=error%> </p>
</form>
</center>
</BODY>
</HTML>
kan i hjælp..
eller hvis i sider med en nemmer løsning. ?
det er bare disse links som ikke må kunne ses ??
