%@LANGUAGE="VBSCRIPT"%> <% Dim rsLogin__strCustomerID rsLogin__strCustomerID = Session("MM_Username") if (Request.Form("tfCustomerID") <> "") then rsLogin__strCustomerID = Request.Form("tfCustomerID") %> <% Dim rsLogin__strPassword rsLogin__strPassword = Session("MM_Password") if (Request.Form("tfPassword") <> "") then rsLogin__strPassword = Request.Form("tfPassword") %> <% set rsLogin = Server.CreateObject("ADODB.Recordset") rsLogin.ActiveConnection = MM_VNewConn_STRING rsLogin.Source = "SELECT * FROM tbCustomers WHERE CustomerID='" + Replace(rsLogin__strCustomerID, "'", "''") + "' AND Password='" + Replace(rsLogin__strPassword, "'", "''") + "'" rsLogin.CursorType = 0 rsLogin.CursorLocation = 2 rsLogin.LockType = 3 rsLogin.Open() rsLogin_numRows = 0 %>