<%
if Request.Form("action") = "Login" then
Username = Replace(Request.Form("username"),"'","")
Password = Replace(Request.Form("password"),"'","")
Set Conn = Server.Createobject("ADODB.Connection")
strDSN = "DRIVER={Microsoft Access Driver (*.mdb)}; " &_
"DBQ=" & Server.Mappath("db/database.mdb") & ""
Conn.Open strDSN
SQL = "SELECT * FROM Bruger WHERE Brugernavn = '"&Username&"' " &_
"AND Password = '"&Password&"'"
Set RS = Conn.Execute(SQL)
if not RS.EOF then
Session("brugerid") = RS("ID")
Response.Redirect("send.asp")
else
Session("brugerid") = ""
Response.Write "<b>Login failed! - Username or Password incorrect</b>"
end if
RS.close
Conn.Close
Set RS = nothing
Set Conn = nothing
end if
if Session("brugerid") = "" then
%><form action="login.asp" method="post" name="login">
<table border="0" cellpadding="0" cellspacing="0"><tr><td></td>
<td colspan="2"><font face="verdana" size="1"><b>Logon</b></font></td></tr>
<tr><td></td>
<td><font size=1 face=verdana>Brugernavn: </font></td>
<td><Input type="text" name="username" size="20"></td></tr>
<tr><td></td>
<td><font size=1 face=verdana>Password: </font></td>
<td><input type="password" name="password" size="20"></td></tr>
<tr><td></td>
<td colspan="2"><center><input type="submit" name="action" value="Login"></center></td></tr>
<tr><td></td></tr>
</table>
</form><%
End if
%>
