%@LANGUAGE="VBSCRIPT"%> <% Dim myconnection__strUserID myconnection__strUserID = "x" if (Request.Form("UserID") <> "") then myconnection__strUserID = Request.Form("UserID") %> <% Dim myconnection__strPassword myconnection__strPassword = "1" if (Request.Form("Password") <> "") then myconnection__strPassword = Request.Form("Password") %> <% set myconnection = Server.CreateObject("ADODB.Recordset") myconnection.ActiveConnection = MM_connCapRes_STRING myconnection.Source = "SELECT * FROM Property_Details WHERE xUserName = '" + Replace(myconnection__strUserID, "'", "''") + "' AND Password = '" + Replace(myconnection__strPassword, "'", "''") + "'" myconnection.CursorType = 0 myconnection.CursorLocation = 2 myconnection.LockType = 3 myconnection.Open() myconnection_numRows = 0 %> <% If myconnection__strUserID <> "x" Then If Not myconnection.EOF Then Session("svUser")=myconnection.Fields.Item("xUserName").Value Session("svPass")=myconnection.Fields.Item("Password").Value Session("svAccess")=myconnection.Fields.Item("ID").Value Response.Redirect "edit_your_listing_ok.asp" else Response.Redirect "login_failed.asp" End If End If %>