<html>
<title>Login</title>
<head>
</head>
<body>
<!-- <Script Language=VBScript> -->
<%
if request ("mode") = "login" then
' Opretter forbindelse til databasen
Set Conn = Server.CreateObject("ADODB.Connection")
DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.MapPath ("database.mdb")
Conn.Open DSN
'ændre imput
Login = Trim(Replace(Request.Form("Login"),"'","''" ))
Password = Trim(Replace(Request.Form("Password"),"'","''" ))
'Lavet af Jimmy Jacobsen
www.webshadow.frip.dk'Opbygger Sql-sætningen
rsSQL = "SELECT * FROM admin where Login = '" & Login & "' and Password = '" & Password & "'"
' hvis brugeren var i databasen
set rs = Conn.execute(rsSQL)
If Not (rs.BOF Or rs.Eof) Then
Session("ID") = rs("ID")
session("login") = True
Response.redirect "logged.asp"
Else
'
' Hvis brugeren ikke var i databasen
Response.redirect "Login.asp"
End If
' Lukker forbindelse til databasen
Conn.Close
Set Conn = Nothing
End if
%>
</Script>
<br>
<form method="post" action="login.asp">
<table border="0" cellspacing="0" width="228" height="125">
<tr>
<td width="78" height="40"><p>Brugernavn:</td>
<td width="165" height="40"><input type="text" name="Login" size="20"></td>
</tr>
<tr>
<td width="78" height="25">Password:</td>
<td width="165" height="25">
<input type="password" name="Password" size="20"></td>
</tr>
<input type="hidden" Name="Mode" Value="login"></td>
<tr>
<td width="78" height="25"><input type="submit" value="Login"></td>
</td>
</table>
</form>
</body>
</html>
