<!-- #include file="conn.asp" -->
<%


Dim StrUsername, StrPassword, StrLoginQuery, BlnIsValidUser, ObjRSLogin

IF Trim(Request.Form("TxtUsername")) = "" OR Trim(Request.Form("TxtPassword")) = "" Then
Response.Redirect("Default.asp")
END IF

StrUsername = Trim(Request.Form("TxtUsername"))
StrPassword = Trim(Request.Form("TxtPassword"))


StrLoginQuery = "Select BuyerID, Username, Password From Buyers where Username='"&StrUsername&"'"
Set ObjRSLogin = ObjCon.Execute(StrLoginQuery)

While NOT ObjRSLogin.EOF

IF LCase(ObjRSLogin("Username")) = LCase(StrUsername) AND LCase(ObjRSLogin("Password")) = LCase(StrPassword) Then
BlnIsValidUser = True
Session("LoginBuyer") = CStr(ObjRSLogin("BuyerID"))
Session("LoginUser") = StrUsername
ELSE
BlnIsValidUser = False
END IF
ObjRSLogin.MoveNext

Wend



IF BlnIsValidUser = True Then
Response.Redirect("LoginSuccess.asp")
ELSE
Response.Redirect("LoginFailure.asp")
END IF

%>