%option explicit%>
<%
dim strUser_Name, strPassword, strMessage, strKey
dim rsLogin, strSQL
strMessage = ""
if Request.Form <> "" then
strUser_Name = LCase (Request.Form ("strUser_Name"))
strPassword = Request.Form ("strPassword")
set rsLogin = Server.CreateObject ("ADODB.RecordSet")
rsLogin.Open "SELECT * FROM tblUser WHERE LCase(strUser_Name) = '" & strUser_Name & "' AND strPassword = '" & strPassword & "'", oConn, 0, 2
if rsLogin.EOF then
strMessage = "Login failed, please try again."
rsLogin.Close : set rsLogin = nothing
else
strKey = keyGen (50)
rsLogin("strKey") = strKey
rsLogin.Update
Response.Redirect "post.asp?key=" & strKey
rsLogin.Close : set rsLogin = nothing
end if
end if
%>
Guidelines web site - Content management system
<%
dim This_Page : This_Page = "login"
%>
<%
function keyGen (intLength)
dim strKeyGen, i, intCharType
strKeyGen = ""
for i = 1 to intLength
' First randomly pick whether we are to use number, Lcase letter or Ucase letter.
' Skewed so that approx correct proportion of all characters comes out.
intCharType = intRandomInteger(1, 62)
if intCharType >= 1 and intCharType <= 10 then
' Number
strKeyGen = strKeyGen & Chr(intRandomInteger(48, 57))
elseif intCharType >= 11 and intCharType <= 36 then
' Upper case letter
strKeyGen = strKeyGen & Chr(intRandomInteger(65, 90))
elseif intCharType >= 37 and intCharType <= 62 then
' Upper case letter
strKeyGen = strKeyGen & Chr(intRandomInteger(97, 122))
end if
next
keyGen = strKeyGen
end function
%>