Untitled Document

<%@LANGUAGE="VBSCRIPT"%> <% 'Buffer Response.Buffer = True %> <%Response.Expires = -10000%> <% Session("svUserID") = "" Session("svUgrupoacceso") = "" Session("svUAdministrador") = "" Session("svUclave")= "" Session("svA_usuario") = "" Session("svA_password") = "" %> <% Dim rslogin__struserid rslogin__struserid = "abc" if (request.form("userID") <> "") then rslogin__struserid = request.form("userID") %> <% Dim rslogin__strpassword rslogin__strpassword = "123" if (request.form("password") <> "") then rslogin__strpassword = request.form("password") %> <% set rslogin = Server.CreateObject("ADODB.Recordset") rslogin.ActiveConnection = MM_promad_STRING rslogin.Source = "SELECT * FROM qr_administracion WHERE A_usuario = '" + Replace(rslogin__struserid, "'", "''") + "' and A_password = '" + Replace(rslogin__strpassword, "'", "''") + "'" rslogin.CursorType = 0 rslogin.CursorLocation = 2 rslogin.LockType = 3 rslogin.Open() rslogin_numRows = 0 %> <% If rsLogin__strUserID <> "abc" then If Not rsLogin.EOF Then If (rsLogin.Fields.Item("Permiso").Value = "Administrador") or (rsLogin.Fields.Item("Permiso").Value = "Master") then Session("svUserID") = (rsLogin.Fields.Item("IDadministrador").Value) Session("svUClave") = (rsLogin.Fields.Item("Clave").Value) Session("svUgrupoacceso") = (rsLogin.Fields.Item("Permiso").Value) Session("svUAdministrador") = ((rsLogin.Fields.Item("Nombre").Value)&" "&(rsLogin.Fields.Item("Apellido").Value)) Session("svA_usuario") = (rsLogin.Fields.Item("A_usuario").Value) Session("svA_password") = (rsLogin.Fields.Item("A_password").Value) Response.Redirect "adminframe.asp" End IF End if End If %> Untitled Document

<% rslogin.Close() %>