%@LANGUAGE=PerlScript%> <% use lib "c:/inetpub/wwwroot/mrtopline"; use genericLIB; use debug; use sqlLIB; use OLE; my $Conn; my $user; my $pass; my $sql; my $RS; loadinivariables("c:/inetpub/wwwroot/mrtopline/mrtopline.def",\%varnames); $user = getvariable("_user"); $pass = getvariable("_password"); if ($user eq "" && $pass eq "") { # see if there is a session variable $user=$Session->{'loginuser'}; $pass=$Session->{'loginpass'}; } $img = $varnames{appearance}->{"images"}; if ($user ne "" && $pass ne "") { # Win32::OLE->Option(Warn => 3); $db = sqlLIB->opendatabase($varnames{database}->{dbnm}); $puser = $user; $ppass = $pass; $puser =~ s/'/''/g; $ppass =~ s/'/''/g; $rst = $db->execute("select fldUserID,fldMRInterviewAdmin from tblUsers where fldUserName = '".$puser."' and fldPassword = '".$ppass."';"); if (!$rst->EOF) { if ($varnames{special}->{plbroken} ne "yes") { $Session->Contents->SetProperty('Item','user',$rst->Fields("fldUserID")->Value); $Session->Contents->SetProperty('Item','username',$user); $Session->Contents->SetProperty('Item','admin',$rst->Fields("fldMrInterviewAdmin")->Value); } else { # # alternative method: not as pretty but it works. # $ScriptingNamespace->setVars("user",$rst->Fields("fldUserID")->value); $ScriptingNamespace->setVars("username",$user); $ScriptingNamespace->setVars("admin",$rst->Fields("fldMRInterviewAdmin")->value); } $Response->Redirect("mainmenu.html"); # $Response->Flush(); $Response->End(); exit(0); } } sub refuse() { $Response->Redirect("login.asp"); # $Response->Flush(); $Response->End(); exit(0); } %>
|
|