<% if request("user") = "" then %>

Username:
Password:

<% else %> Testing <% Set cnn1 = Server.CreateObject("ADODB.Connection") openStr = "dsn=users" cnn1.Open openStr,"","" sql = "SELECT distinct username from users where " & _ "username = '" & Replace(request("user"), "'", "''") & "' and " & _ "password = '" & Replace(request("pass"), "'", "''") & "'" Set rsMbrs = Server.CreateObject("ADODB.Recordset") rsMbrs.Open sql, cnn1, adOpenForwardOnly, adLockReadOnly, adCmdText Do While Not rsMbrs.EOF response.write("+VALID") rsMbrs.MoveNext Loop ' Close the recordset and discard the object. rsMbrs.Close set rsMbrs = Nothing ' Close the connection and discard the object. cnn1.Close set cnn1 = Nothing end if %>