%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%> <% Response.Buffer = True Response.Expires = 60 Response.Expiresabsolute = Now() - 1 Response.AddHeader "pragma","no-cache" Response.AddHeader "cache-control","private" Response.CacheControl = "no-cache" %> <% If (CStr(Request.Form("Login"))<>"") Then If (CStr(Request.Form("StoreProfile"))<>"") Then Response.Cookies("UserName") = CStr(Request("UserName")) Else Response.Cookies("UserName") = "" End If today = DateAdd("d",30, Date()) Response.Cookies("UserName").Expires = today End If %> <% ' *** Valida requisição para entrar no site MM_LoginAction = Request.ServerVariables("URL") If Request.QueryString <> "" Then MM_LoginAction = MM_LoginAction + "?" + Server.HTMLEncode(Request.QueryString) MM_valUsername=CStr(Request.Form("UserName")) If MM_valUsername <> "" Then MM_fldUserAuthorization="UserAccess" MM_redirectLoginSuccess="downloads.asp" 'protectedpage MM_redirectLoginFailed="login.asp?failed=true" MM_flag="ADODB.Recordset" Set MM_rsUser = Server.CreateObject(MM_flag) MM_rsUser.ActiveConnection = MM_connSensocar_STRING MM_rsUser.Source = "SELECT UserName, UserPassword, UserId" If MM_fldUserAuthorization <> "" Then MM_rsUser.Source = MM_rsUser.Source & "," & MM_fldUserAuthorization MM_rsUser.Source = MM_rsUser.Source & " FROM Users WHERE UserName='" & Replace(MM_valUsername,"'","''") &"' AND UserPassword='" & Replace(Request.Form("Password"),"'","''") & "'" MM_rsUser.CursorType = 0 MM_rsUser.CursorLocation = 2 MM_rsUser.LockType = 3 Response.Write(MM_rsUser.Source) MM_rsUser.Open If Not MM_rsUser.EOF Or Not MM_rsUser.BOF Then ' username and password match - this is a valid user Session("MM_Username") = MM_valUsername Session("MM_UserID") = cStr(MM_rsUser.Fields.Item("UserId").Value) If (MM_fldUserAuthorization <> "") Then Session("MM_UserAuthorization") = CStr(MM_rsUser.Fields.Item(MM_fldUserAuthorization).Value) Else Session("MM_UserAuthorization") = "" End If If CStr(Request.QueryString("accessdenied")) <> "" And True Then MM_redirectLoginSuccess = Request.QueryString("accessdenied") End If MM_rsUser.Close Response.Redirect(MM_redirectLoginSuccess) End If MM_rsUser.Close Response.Redirect(MM_redirectLoginFailed) End If %>