%@LANGUAGE="VBSCRIPT" %> <% If Request("Action") = LoginButton Then Set DB = Connect() SQL = "SELECT * FROM USERS WHERE Username = '" + Request("Username") + "'" Set RS = DB.Execute (SQL) If (RS.EOF And RS.BOF) Then Session (SiteID + "Authentication") = False Response.Redirect ("login.asp?Error=Username+does+not+exist.") ElseIf RS("Password") <> Request ("Password") Then Session (SiteID + "Authentication") = False Response.Redirect ("login.asp?Error=Invalid+Password") Else Session (SiteID + "Username") = RS("Username") Session (SiteID + "FirstName") = RS("Name") Session (SiteID + "Surname") = RS("Surname") Session (SiteID + "Authentication") = True Response.Redirect ("informationform.asp") End If End If %>