<!-- #include file="dbconnect.asp" -->
      var conn = DBConnect();
      var cmd  = Server.CreateObject("ADODB.Command")
      Set cmd.ActiveConnection = comm
      
      cmd.CommandText = "select_user_exists"
      cmd.CommandType = adCmdStoredProc
      cmd.Parameters.Append cmd.CreateParameter("Login", adVarChar, _
	adParamInput)
      cmd.Parameters.Append cmd.CreateParameter("Password", adVarChar, _
	adParamInput)
	
	'set values of parameters
	cmd("Login") 	= Request.Form("username")
	cmd("Password") = Request.Form("password")

      cmd.Execute

 'init rs
    Set Rs = New ADODB.Recordset
    With Rs
        .CursorLocation = adUseClient
        .CursorType = adOpenStatic
        .LockType = adLockReadOnly
    End With
    
    'init cmd
    Set Cmd = New ADODB.Command
    With Cmd
        .ActiveConnection = GetConnection()
        .CommandType = adCmdStoredProc
        .CommandText = "p_YourProc"
    End With
    
    Rs.Open Cmd

<%@  Language=VBScript ENABLESESSIONSTATE=True %>
<%
Option Explicit
Dim strError, cmd, objRS, conn

'see if the form has been submitted
If Request.Form("action")="login" Then
   'the form has been submitted

   '// validate the form

   'check if a username has been entered
   If Request.Form("username") = "" Then _
       strError = strError & "- Please enter a username!<br>" & vbNewLine

   'check if a password has been entered
   If Request.Form("password") = "" Then _
       strError = strError & "- Please enter a password!<br>" & vbNewLine

   '// check if an error has occured
   If strError = "" Then
      'continue
      'include database connection code

      conn = DBConnect()
      cmd  = Server.CreateObject("ADODB.Command")
      Set cmd.ActiveConnection = conn

      cmd.CommandText = "select_member_login"
      cmd.CommandType = adCmdStoredProc
      cmd.Parameters.Append cmd.CreateParameter("Login", adVarChar, _
	adParamInput)
      cmd.Parameters.Append cmd.CreateParameter("Password", adVarChar, _
	adParamInput)

	'set values of parameters
	cmd("Login") 	= Request.Form("username")
	cmd("Password") = Request.Form("password")

	  objRS = Server.CreateObject("ADODB.Recordset")
      Set objRS = cmd.Execute

      '// see if there are any records returned
      If objRS.EOF Then
          'no username found
          strError = "- Invalid username or password!<br>" & vbNewLine
      Else
               'username/password valid
               'save session data
               Session("loggedin") = True
               Session("userid")   = objRS("LoginID")
	       	   Session("clientid") = objRS("ClientID")
		       Session("login")    = objRS("Login")
		       Session("admin")    = objRS("Admin")
		       objRS.close()
		       DBDisconnect(conn)
               'redirect to ims page
               Response.Redirect ("default.asp")
               Response.End
      End If
   End If

   If strError <> "" Then
      'output the error message
      'add extra HTML...
      strError = "<p><font color=""#FF0000"">The following errors occured:" & _
          "</font><br>" & vbNewLine & strError
   End If
   'display message in URL.. (ie thank you for registering)
   If Request.QueryString("msg") <> "" And strError = "" Then
      strError = "<p>" & Request.QueryString("msg") & "</p>"
   End If
End If


Session("loggedin")=""
Session("userid")=""
Session("clientid") = ""
Session("login")    = ""
Session("admin")    = ""

%>

      conn = DBConnect()
      set cmd  = Server.CreateObject("ADODB.Command")
      set cmd.ActiveConnection = conn

<SCRIPT LANGUAGE="JavaScript" RUNAT="server">

//function connects to the IMS database.
//returns a connection based object
//PRE: none
//POST: conn, a connection to the database
//PARAM: none
function DBConnect()
{
	var conn = "";
	try
	{
		var connString = "Provider=SQLOLEDB.1;Persist Security Info=False;User ID=IMS;Password=ibm123;Initial Catalog=IMS;Data Source=HERCULES;";
		
		conn = new ActiveXObject("ADODB.Connection");
		conn.Open( connString );
	} 
	catch (e)
	{
		//catch any exceptions that might be thrown  
		Response.write("Error:" + e.description + "<br/>");
	}    
	return conn; 
}


//function disconnects from a database 
//if the state of the database is open
//PRE: none
//POST: integer return
//PARAM: conn, connection object from invoking page
function DBDisconnect(conn)
{
	if ((conn) != null)
	{
		if (conn.State == 1) 
		{//connection open
		 //close it 
			conn.close();
		}
		//set to null
		conn = null;
	} 
	//non-zero = true return value
	return 1;
}
</SCRIPT>