Her er selve scriptet:
=============================================================
<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "
http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><%
'//SÆTTER UDLØB PÅ ASP-KODEN, BUFFER OG STANDARDER (DK)
Response.Expires = - 180
Response.Buffer = True
Session.LCID = 1030
'//KONTROLLERE OM PERSONEN ALLEREDE ER LOGGET IND
If Not IsEmpty(Session("valid-login")) Then
'//SENDER PERSONEN DIREKTE TIL LOGGED_IN
Response.Redirect "logged_in.asp"
'//AFSLUT KONTROL OM ALLEREDE LOGGET IND
End If
'//BEDER OM COOKIEOPLYSNINGER (Navn, emailad, huskmig, autologin)
strname = Request.Cookies("flje")("name")
stremailad = Request.Cookies("flje")("emailad")
strremember = Request.Cookies("flje")("remember")
strlogin = Request.Cookies("flje")("login")
'//HVIS DER SKAL BRUGES AUTOLOGIN
If strlogin = "yes" Then
'//FORBINDER TIL DATABASEN
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open "DRIVER={Microsoft Access Driver (*.mdb)};DBQ="&Server.MapPath("db/mailing.mdb")
'//SØGER EFTER MATCH I DATABASEN I FORHOLD TIL FORM-OPLYSNINGER
strSQL = "Select id, name, emailad From mailinglist Where name = '" & strname & "' And emailad = '" & stremailad & "' "
Set RS = Conn.Execute(strSQL)
'//HVIS DER IKKE ER EN MATCH
If RS.BOF Or RS.EOF Then
'//LUKKER DATABASEN OG SÆTTER FEJLMEDDELELSE
Conn.Close
Set Conn = Nothing
strErr = "Du har ikke adgang!"
'//ELLERS ER DER MATCH
Else
'//SÆTTER SESSION
Session("valid-login") = RS("id")
Session.TimeOut = 30
'//SÆTTER Cookies
'Response.Cookies("flje").Expires = Date+365
Response.Cookies("flje").Secure = False
Response.Cookies("flje").HasKeys
Response.Cookies("flje")("name") = strformname
Response.Cookies("flje")("emailad") = strformemailad
Response.Cookies("flje")("remember") = strformremember
Response.Cookies("flje")("login") = strformlogin
'//LUKKER DATABASE OG SENDER VIDERE
Conn.Close
Set Conn = Nothing
Response.Redirect "logged_in.asp"
'//AFSLUT MATCHSØGNING
End If
'//AFSLUT AUTOLOGIN
End If
'//HVIS DER LOGGES IND
If Lcase(Request.ServerVariables("REQUEST_METHOD")) = "post" Then
'//HENTER FORMELEMENTERNE OG FJERNE UØNSKET MELLEMRUM I START OG SLUT
strformname = Trim(Request.Form("name"))
strformemailad = Trim(Request.Form("emailad"))
strformremember = Trim(Request.Form("remember"))
strformlogin = Trim(Request.Form("login"))
'//TJECKER OM NAVN OG MAIL ER UDFYLDT
If strformname = "" Or strformemailad = "" Then
'//SÆTTER FEJLMEDDELELSEN
strErr = "Du skal udfylde begge felter!"
'//ELLERS ER BEGGE FELTER UDFYLDT
Else
'//FJERNER UØNSKEDE TEGN FRA FORMFELTERNE (så kan hack undgås)
strformname = Replace(strformname,"'","''")
strformemailad = Replace(strformemailad,"'","''")
'//HVIS DER IKKE ER FLUEBEN VED HUSK MIG
If strformremember = "" Then
'//SÆTTER HUSK MIG TIL NEJ
strformremember = "no"
'//ELLERS ER DER FLUEBEN VED HUSK MIG
Else
'//SÆTTER HUSK MIG TIL JA
strformremember = "yes"
'//AFSLUT FLUEBEN VED HUSK MIG
End If
'//HVIS DER IKKE ER FLUEBEN VED AUTOLOGIN
If strformlogin = "" Then
'//SÆTTER AUTOLOGIN TIL NEJ
strformlogin = "no"
'//ELLERS ER DER FLUEBEN VED AUTOLOGIN
Else
'//SÆTTER AUTOLOGIN TIL JA
strformlogin = "yes"
'//AFSLUT FLUEBEN VED AUTOLOGIN
End If
'//FORBINDER TIL DATABASEN
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open "DRIVER={Microsoft Access Driver (*.mdb)};DBQ="&Server.MapPath("db/mailing.mdb")
'//SØGER EFTER MATCH I DATABASEN I FORHOLD TIL FORM-OPLYSNINGER
strSQL = "Select id, name, emailad From mailinglist Where name = '" & strformname & "' And emailad = '" & strformemailad & "' "
Set RS = Conn.Execute(strSQL)
'//HVIS DER IKKE ER EN MATCH
If RS.BOF Or RS.EOF Then
'//LUKKER DATABASEN OG SÆTTER FEJLMEDDELELSE
Conn.Close
Set Conn = Nothing
strErr = "Du har ikke adgang!"
'//ELLERS ER DER MATCH
Else
'//SÆTTER SESSION
Session("valid-login") = RS("id")
'//SÆTTER Cookies
Response.Cookies("flje").Expires = Date+365
Response.Cookies("flje").Secure = False
Response.Cookies("flje").HasKeys
Response.Cookies("flje")("name") = strformname
Response.Cookies("flje")("emailad") = strformemailad
Response.Cookies("flje")("remember") = strformremember
Response.Cookies("flje")("login") = strformlogin
'//LUKKER DATABASE OG SENDER VIDERE
Conn.Close
Set Conn = Nothing
Response.Redirect "logged_in.asp"
'//AFSLUT MATCHSØGNING
End If
'//AFSLUT FELTKONTROL
End If
'//AFSLUT HVIS DER LOGGES IND
End If
'//SIDEN SKRIVES
Response.write "<html xmlns=""
http://www.w3.org/1999/xhtml"" xml:lang=""da"">" & vbCrLf
Response.write "<head>" & vbCrLf
Response.write "<title>..:: LOGIN ::..</title>" & vbCrLf
Response.write "<meta name=""title"" content=""login"" />" & vbCrLf
Response.write "<meta http-equiv=""Content-Type"" content=""text/html; charset=iso-8859-1"" />" & vbCrLf
Response.write "<meta http-equiv=""pragma"" content=""dan"" />" & vbCrLf
Response.write "<meta name=""author"" content=""LEGOmanden"" />" & vbCrLf
Response.write "<meta http-equiv=""imagetoolbar"" content=""no"" />" & vbCrLf
Response.write "<meta name=""robots"" content=""noindex,nofollow"" />" & vbCrLf
Response.write "<meta name=""Revisit-after"" content=""30"" />" & vbCrLf
Response.write "<meta http-equiv=""expires"" content=""0"" />" & vbCrLf
Response.write "<meta http-equiv=""pragma"" content=""no-cache"" />" & vbCrLf
Response.write "<meta http-equiv=""chace-control"" content=""no-store"" />" & vbCrLf
Response.write "<meta name=""ratin"" content=""general"" />" & vbCrLf
Response.write "<style type=""text/css"">" & vbCrLf
Response.write " body {background: #ffffff; font: 85% tahoma, sans-serif; color: #000000; text-align: center; padding: 25px; }" & vbCrLf
Response.write " form {background: #ffffff; width: 500px; text-align: left; }" & vbCrLf
Response.write " fieldset {background: #ffffff; width: 100%; }" & vbCrLf
Response.write " legend {text-transform: capitalize; font-weight: bold; }" & vbCrLf
Response.write " label {width: 50%; text-transform: capitalize; padding-left: 10%; }" & vbCrLf
Response.write " #button {text-transform: capitalize; margin: 10px; }"
Response.write "</style>" & vbCrLf
Response.write "</head>" & vbCrLf
Response.write "<body>" & vbCrLf
Response.write " <form action=""login.asp"" method=""post"">" & vbCrLf
Response.write " <fieldset>" & vbCrLf
Response.write " <legend>Log ind</legend>" & vbCrLf
Response.write " <br />" & vbCrLf
Response.write " <label>Brugernavn:</label>" & vbCrLf
If strremember = "no" Then
Response.write " <input type=""text"" name=""name"" size=""25"" /><br />" & vbCrLf
Else
Response.write " <input type=""text"" name=""name"" size=""25"" value=""" & strname & """ /><br />" & vbCrLf
End If
Response.write " <label>Email-adresse:</label>" & vbCrLf
If strremember = "no" Then
Response.write " <input type=""text"" name=""emailad"" size=""25"" /><br />" & vbCrLf
Else
Response.write " <input type=""text"" name=""emailad"" size=""25"" value=""" & stremailad & """ /><br />" & vbCrLf
End If
Response.write " <label>husk mig:</label>"
If strremember = "no" Then
Response.write " <input type=""checkbox"" name=""remember"" value=""yes"" /><br />" & vbCrLf
Else
Response.write " <input type=""checkbox"" name=""remember"" value=""yes"" /><br />" & vbCrLf
End If
Response.write " <label>log mig ind automatisk:</label>" & vbCrLf
If strremember = "no" Then
Response.write " <input type=""checkbox"" name=""login"" value=""yes"" /><br />" & vbCrLf
Else
If strlogin = "yes" Then
Response.write " <input type=""checkbox"" name=""login"" value=""yes"" /><br />" & vbCrLf
Else
Response.write " <input type=""checkbox"" name=""login"" value=""yes"" /><br />" & vbCrLf
End If
End If
If strErr <> "" Then
Response.write " <label style=""color: #990000; "">#NOTE:</label>" & vbCrLf
Response.write " <span style=""color: #990000; "">" & strErr & "</span><br />" & vbCrLf
End If
Response.write " <br />" & vbCrLf
Response.write " </fieldset>" & vbCrLf
Response.write " <span><input id=""button"" type=""submit"" value=""login"" /></span>" & vbCrLf
Response.write " </form>" & vbCrLf
Response.write "</body>" & vbCrLf
%>
</html>
=============================================================
