<%@ Language=VBScript %>
<%
Option Explicit
%>
<!--#include file="_ScriptLibrary/adovbs.inc"-->
<!--#include file="datastore.asp"-->

<%

Dim sUserID, sPassword
sUserID = trim(Request.form("txtUserID"))
sPassword = trim (Request.form("txtUserPassword"))


Dim objConn
Dim objRs

'check that neither fields are empty. if empty redirect to login screen
'if strUserID = "" or strPassword = "" then Response.Redirect "login.asp?menu=school&userid=" & strUserID & "&again=1"


Set objConn = server.CreateObject("ADODB.Connection")	'Connection object
Set objRs = server.CreateObject("ADODB.Recordset")	'Recordset object

'open the connection object
objConn.Open sConnect

'open the SCHOOL table
objRs.Open "MANAGER", objConn, 0, 3

'filter the recordset
objRs.Filter = "managerid = '" & sUserID & "'"

if objRs.EOF = false then 
	if objRs("password") = sPassword then
		Response.redirect "research.asp?userid=" & sUserID
	else
		if request("again") = "1" then
			response.redirect "user.asp"
		else
			Response.redirect "login.asp?menu=school&userid=" & sUserID & "&again=1&badpw=True"
		end if
	end if
else
	if request("again") = "1" then
		response.redirect "user.asp?notfound=1"		
	else
	
		response.redirect "login.asp?menu=school&again=1"
	end if
end if
%>