Ecco la pagina... Grazie!
<%@ LANGUAGE = JScript %>
<%
errore = false;
username = String(Request.Form("username"));
password = String(Request.Form("password"));
from = String(Request.QueryString("from"));
if(username!="undefined" && username!=""){
from = Request.Form("from");
var ADOConn = Server.CreateObject("Adodb.Connection");
strConn = "";
strConn += "driver={Microsft Access Driver (*.mdb)};";
strConn += "dbq=" + Server.MapPath("utenza.mdb") + ";";
strConn += "pwd=prova";
ADOConn.Open(strConn);
tempUsername = username.replace(/'/g,"''");
tempPassword = password.replace(/'/g,"''");
sql = "SELECT * FROM utenti WHERE username LIKE'" + tempUsername + "'AND password = '" + tempPassword + "'";
ris = ADOConn.Execute(sql);
if (ris.EOF)errore= true;
else {
Session.Timeout = 15;
Session("username") = String(ris("username"));
ris.Close();
ADOConn.Close();
if (from!="undefined") Response.Redirect(from);
else Response.Redirect("main.asp");
}
ris.Close();
ADOConn.Close();
}
%>
<html>
<head>
<title>Accesso all'area riservata</title>
<meta http-equiv="Content-Type" content="text/html"; charset=iso-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
<div align="center">
<p><b><font face="Verdana" size="2">ATTENZIONE STAI PER ACCEDERE AD UN'AREA RISERVATA.</font></b></p>
<% if (errore) { %>
<p><b><font face="Verdana" size="2" color="#FF0000">DATI NON TROVATI. ACCESSO NEGATO</font></b></p>
<% } %>
<form method="post" action="login.asp">
<input type="Hidden" name="from" value="<%=from%>">
<p>
<font face="Verdana" size="2">USERNAME</font><br>
<input type="Text" name="username" maxlength="20" size="25">
</p>
<p>
<font face="Verdana" size="2">PASSWORD</font><br>
<input type="Password" name="password" maxlength="20" size="25">
</p>
<p><input type="Submit" value="ACCEDI"></p>
</form>
</div>
</body>
</html>
