<%@ Language=VBScript %>
<% Dim strConnect %>
<!-- #include file="datastore.asp" -->
<%   	  
Dim objRS
Set objRS = Server.CreateObject("ADODB.Recordset")
Set objConn = Server.CreateObject("ADODB.Connection")
objRS.Open "users", strConnect, adoCon
Session("username")= Request.Form("username")
Session("password")= Request.Form("password")

While Not objRS.EOF			
	If objRS.Fields("username") = Session("username") and objRS.Fields("password") = Session("password") Then 
		Response.Cookies("strSavedLogin")("username") = Request.Form("username")
		Response.Cookies("strSavedLogin")("blnLoginSaved")= True
		Response.Cookies("strSavedLogin").Expires = Date + 30
		Session("blnLogin")= True
		Session("username")= Request.Form("username")
		Session("password")= Request.Form("password")
		Session("firstname")= objRS.Fields("firstname")
		Session("lastname")= objRS.Fields("lastname")
		Session("email")= objRS.Fields("email")
		Session("visitorip")= Request.Servervariables("REMOTE_HOST")
		Session("visitorbrowser")= Request.Servervariables("HTTP_USER_AGENT")
		Session("visitorreferer")= Request.Servervariables("HTTP_REFERER")
		Session("visitoraccount")= Request.Servervariables("LOGON_USER")
		Session("visitorservername")= Request.Servervariables("SERVER_NAME")
		Session.Timeout = 999
		Application("WhoOn") = Application("WhoOn") + 1
	End If
	objRS.MoveNext
Wend
objRS.Close

If Session("blnLogin")= True then
	Response.Redirect "about.asp"
Else
	Response.Redirect "loginfailed.asp"
End If

%>