<%
if session("ganpati_user")="" and request.form("user")<>"" then
user=request.Form("user")
pass=request.Form("pass")
set my_conn=Server.CreateObject("ADODB.Connection")
my_conn.open "Driver={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.MapPath("ganpati.mdb") & "; "
Set rs = Server.CreateObject("ADODB.Recordset")
rs.Open "Select * from users where user='" & user & "' ", my_conn
if rs.eof or rs.bof then
response.Write "Authentication Fails!! ERR: Invalid Signup ID..."
session("ganpati_user")=""
else
if rs.fields("pass")<>pass then
response.Write "Authentication Fails!! ERR: Password mismatch..."
session("ganpati_user")=""
else
session("ganpati_user")=user
if user="myadmin" then
'session("ganpati_user")="myadmin"
response.Redirect "administrator.asp"
else response.Redirect("myaccount.asp") end if
end if
end if
end if
%>
