%@LANGUAGE="JAVASCRIPT"%> <% var Recordset1 = Server.CreateObject("ADODB.Recordset"); Recordset1.ActiveConnection = MM_conn_STRING; Recordset1.Source = "SELECT * FROM usr ORDER BY usrid ASC"; Recordset1.CursorType = 0; Recordset1.CursorLocation = 2; Recordset1.LockType = 1; Recordset1.Open(); var Recordset1_numRows = 0; %> <% // *** Validate request to log in to this site. var MM_LoginAction = Request.ServerVariables("URL"); if (Request.QueryString!="") MM_LoginAction += "?" + Request.QueryString; var MM_valUsername=String(Request.Form("username")); if (MM_valUsername != "undefined") { var MM_fldUserAuthorization=""; var MM_redirectLoginSuccess="../jcfw/index.asp"; var MM_redirectLoginFailed="../jcfw/error.asp"; var MM_flag="ADODB.Recordset"; var MM_rsUser = Server.CreateObject(MM_flag); MM_rsUser.ActiveConnection = MM_conn_STRING; MM_rsUser.Source = "SELECT username, password"; if (MM_fldUserAuthorization != "") MM_rsUser.Source += "," + MM_fldUserAuthorization; MM_rsUser.Source += " FROM usr WHERE username='" + MM_valUsername.replace(/'/g, "''") + "' AND password='" + String(Request.Form("password")).replace(/'/g, "''") + "'"; MM_rsUser.CursorType = 0; MM_rsUser.CursorLocation = 2; MM_rsUser.LockType = 3; MM_rsUser.Open(); if (!MM_rsUser.EOF || !MM_rsUser.BOF) { // username and password match - this is a valid user Session("MM_Username") = MM_valUsername; if (MM_fldUserAuthorization != "") { Session("MM_UserAuthorization") = String(MM_rsUser.Fields.Item(MM_fldUserAuthorization).Value); } else { Session("MM_UserAuthorization") = ""; } if (String(Request.QueryString("accessdenied")) != "undefined" && false) { MM_redirectLoginSuccess = Request.QueryString("accessdenied"); } MM_rsUser.Close(); Response.Redirect(MM_redirectLoginSuccess); } MM_rsUser.Close(); Response.Redirect(MM_redirectLoginFailed); } %> <% var Repeat1__numRows = 10; var Repeat1__index = 0; Recordset1_numRows += Repeat1__numRows; %>