% Option Explicit %> <% Dim oConn ' Connection Dim oRS ' Record Set Dim oSql Dim oPwd Set oConn = Session("conn") Set oRS = Server.CreateObject("ADODB.RecordSet") oSql = "" If (Request.Form("btnLog") <> "") Then oSql = "SELECT UserName, Pwd FROM tblUser" oRS.Open oSql, oConn, adOpenForwardOnly, adLockReadOnly If (Not oRS.EOF) Then oPwd = Request.Form("txtPassword") If ((UCase(oRS("UserName")) = UCase(replaceSpChrInput(Request.Form("txtUser")))) And ((oRS("Pwd") & "") = (replaceSpChrInput(encrypts(oPwd, 10, Len(oPwd))) & ""))) Then Session("logincrdap") = "success_crdap" Response.Redirect("index.asp") End If End If End If %>