%@ LANGUAGE=VBSCRIPT %>
<%response.buffer = false%>
<%
Dim Conn_CONNECTIONSTRING
Dim Conn
Dim objRecordset1
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.CONNECTIONSTRING = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.Mappath("/web/database.mdb") & ";"
Conn.Open
If request.form("login") = "yes" then
sqltemp="select * from Records where Email='"
sqltemp=sqltemp & request.form("username") & "'"
'sqltemp=sqltemp & "AND password='"
'sqltemp=sqltemp & request.form("password") & "'"
set rstemp=Conn.execute(SQLTemp)
If NOT rstemp.eof then
session("log_in") = "True"
'response.write " welcome "
set rs=nothing
set conn=nothing
Response.Redirect("price1.asp")
Else
Response.Redirect("invalid.asp")
End If
end if
%>