Hi Kamilsey,
Below is a simple login page:
<HTML>
<HEAD>
<TITLE>Login Page</TITLE>
</HEAD>
<BODY>
<h1>Login Page</font></h1>
<FORM ACTION="CheckLogin.asp" METHOD=POST>
<TABLE>
<TR>
<TD>Login Name:<br>
<INPUT TYPE="text" NAME="Login"></TD>
</TR>
<TR>
<TD>Password:<br>
<INPUT TYPE="password" NAME="Pass"></TD>
</TR>
<TR>
<TD><INPUT TYPE=SUBMIT VALUE="Login>
<INPUT TYPE=RESET VALUE="Reset"></TD>
</TR>
</TABLE>
</FORM>
</BODY>
</HTML>
The "CheckLogin.asp" page, which the above form calls, now checks Login information, and if it's correct creates and sets session variables for the authorized user (Note that the below code is ALL that the page should contain - nothing else is needed):
<%
dim strLogin
dim strPass
strLogin = request.Form("Login")
strPass = request.Form("Pass")
if (strPass = "session" and strLogin = "session")then
session("VaiidUser") = True
response.redirect "PasswordProtectedPage.asp"
else
response.redirect "Login.asp"
end if
%>
Finally, above all the HTML code for your "PasswordProtectedPage.asp", place the following:
<%@Language=VBScript%>
<%
If ((session("ValidUser")="") OR (session("ValidUser")="False")) Then
Response.Redirect "Login.asp"
End IF
%>
<HTML>
(etc...)
This will give you a very basic password-protected page. Please note that session variables are rather slow, so you may be better off setting a cookie and checking it's value instead. That's a bit more convoluted so let's stick with this one first!
Good luck!
Jim
[Edited by gzazJim on 08-18-2000 at 10:27 AM]