<%option explicit%> <% dim strUser_Name, strPassword, strMessage, strKey dim rsLogin, strSQL strMessage = "" if Request.Form <> "" then strUser_Name = LCase (Request.Form ("strUser_Name")) strPassword = Request.Form ("strPassword") set rsLogin = Server.CreateObject ("ADODB.RecordSet") rsLogin.Open "SELECT * FROM tblUser WHERE LCase(strUser_Name) = '" & strUser_Name & "' AND strPassword = '" & strPassword & "'", oConn, 0, 2 if rsLogin.EOF then strMessage = "Login failed, please try again." rsLogin.Close : set rsLogin = nothing else strKey = keyGen (50) rsLogin("strKey") = strKey rsLogin.Update Response.Redirect "post.asp?key=" & strKey rsLogin.Close : set rsLogin = nothing end if end if %> Guidelines web site - Content management system <% dim This_Page : This_Page = "login" %>

Management login

<%if strMessage <> "" then%><%=strMessage%><%end if%> 

User Name:

Password:

<% function keyGen (intLength) dim strKeyGen, i, intCharType strKeyGen = "" for i = 1 to intLength ' First randomly pick whether we are to use number, Lcase letter or Ucase letter. ' Skewed so that approx correct proportion of all characters comes out. intCharType = intRandomInteger(1, 62) if intCharType >= 1 and intCharType <= 10 then ' Number strKeyGen = strKeyGen & Chr(intRandomInteger(48, 57)) elseif intCharType >= 11 and intCharType <= 36 then ' Upper case letter strKeyGen = strKeyGen & Chr(intRandomInteger(65, 90)) elseif intCharType >= 37 and intCharType <= 62 then ' Upper case letter strKeyGen = strKeyGen & Chr(intRandomInteger(97, 122)) end if next keyGen = strKeyGen end function %>