<!-- #INCLUDE FILE="Common.asp" -->

<%
'
'   Filename: Login.asp
'   Generated with CodeCharge 1.2.0
'   ASPTemplates.ccp build 5/9/2001
'


sFileName = "Login.asp"
sTemplateFileName = "Login.html"


' Login Open Event start
' Login Open Event end


' Login PageSecurity begin

' Login PageSecurity end

' Login OpenAnyPage Event start
' Login OpenAnyPage Event end


LoadTemplate sAppPath & sTemplateFileName, "main"

LoadTemplate sHeaderFileName, "Header"


SetVar "FileName", sFileName


sLoginErr = ""

sAction = GetParam("FormAction")
sForm = GetParam("FormName")
Select Case sForm
  Case "Login"
    LoginAction(sAction)
end select

Menu_Show
Login_Show
Parse "Header", False
Parse "main", False
Response.write PrintVar("main")

' Login Close Event start
' Login Close Event end


'--------------------------------------------------



Sub LoginAction(sAction)
  Select case sAction
    Case "login"
      ' Login action
      
      ' Login Login begin
      sLogin = GetParam("Login")
      sPassword = GetParam("Password")
      bPassed = CLng(DLookUp("employees", "count(*)", "login =" & ToSQL(sLogin, "Text") & " and pass=" & ToSQL(sPassword, "Text")))
      
' Login OnLogin Event start
' Login OnLogin Event end

      if bPassed > 0 then
        ' Login and password passed

        Session("UserID") = CStr(DLookUp("employees", "employee_id", "login =" & ToSQL(sLogin, "Text") & " and pass=" & ToSQL(sPassword, "Text")))
        Session("UserRights") = CLng(DLookUp("employees", "security_level", "login =" & ToSQL(sLogin, "Text") & " and pass=" & ToSQL(sPassword, "Text")))
        sQueryString = GetParam("querystring")
        sPage = GetParam("ret_page")
        if not(sPage = request.serverVariables("SCRIPT_NAME")) and not(isEmpty(sPage)) then
          response.redirect(sPage & "?" & sQueryString)
        end if
        
        response.redirect("Default.asp")
      else
        sLoginErr = "Login or Password is incorrect."
      end if
      Parse "FormLogin", False
      ' Login Login end
      
    Case "logout"
      ' Logout action
      
      ' Login Logout begin
      
' Login OnLogout Event start
' Login OnLogout Event end

      Session("UserID") = Empty
      Session("UserRights") = Empty
      response.redirect(sFileName)
      Parse "FormLogin", False
      ' Login Logout end
      
  End Select
End Sub

Sub Login_Show()
  
  ' Login Show begin
  
' Login Open Event start
' Login Open Event end

  SetVar "sLoginErr", sLoginErr
  SetVar "querystring", GetParam("querystring")
  SetVar "ret_page", GetParam("ret_page")
  
' Login BeforeShow Event start
' Login BeforeShow Event end

  if Session("UserID") = "" then
    ' User did not login
    SetVar "LogoutAct", ""
    SetVar "UserInd", ""
    SetVar "Login", ToHTML(GetParam("Login"))
    if sLoginErr = "" then
      SetVar "LoginError", ""
    else
      SetVar "sLoginErr", sLoginErr
      Parse "LoginError", False
	  End if
    Parse "LoginAct", false
  else
    ' User logged in
    SetVar "LoginError", ""
    SetVar "LoginAct", ""
    SetVar "UserID", DLookUp("employees", "login", "employee_id =" & Session("UserID"))
    Parse "UserInd", False
  end if
  Parse "FormLogin", False
  
' Login Close Event start
' Login Close Event end

  ' Login Show end
  
End Sub

%>

<!-- #INCLUDE FILE="Header.asp" -->