<%
if request.QueryString("action")= "check" then
dim rs,rs1
set rs=server.CreateObject("adodb.recordset")
set rs1=server.CreateObject("adodb.recordset")
username=trim(Request.Form("username"))
password=trim(request.Form("password"))
' & "' and Custpwd='" & password & "'"
rs.open "Select * from MastCust where CustLogin='" & username &"'",conn,3,3
rs1.open "Select * from Admin",conn,3,3
login=True
if not rs.eof then
if password=rs("custpwd") or password=rs1("CommonCustPwd") then
Session("username")=username
Session("uid")=rs("customerid")
response.Redirect("CustOrder.asp")
response.End()
else
login=false
end if
else
login=false
end if
else
login=true
end if
%>
Technology
is not our business... it is our passion
