<% Response.Buffer = true Const adOpenForwardOnly = 0 Const adOpenKeyset = 1 Const adOpenDynamic = 2 Const adOpenStatic = 3 Const adLockReadOnly = 1 Const adLockPessimistic = 2 Const adLockOptimistic = 3 Const adLockBatchOptimistic = 4 Set dcnDB = Server.CreateObject("ADODB.Connection") %> <% dcnDB.Open strDatabaseLocation strSQL = "SELECT * FROM Usagers " strSQL = strSQL & " WHERE " strSQL = strSQL & " Usager LIKE '" & Request.Form("txtusername") & "' " Set rsProd1 = dcnDB.Execute(strSQL) strSQL = strSQL & " AND motdepasse LIKE '" & Request.Form("txtpassword") & "' " Set rsProd2 = dcnDB.Execute(strSQL) %> <% If (not rsProd2.BOF) and (not rsProd2.EOF) then Session("UserID") = Request.Form("txtusername") Session("motdepasse") = Request.Form("txtpassword") Session("suppauto") = rsProd2("suppression_autorisee") Response.Redirect "liste_resultats.asp?ordre=1" else Response.Redirect "refus.html" end if %> <% rsProd1.Close rsProd2.Close dcnDB.Close %>