<%@ Language=VBScript %>
<%
Option Explicit
%>
<!--#include file="_ScriptLibrary/adovbs.inc"-->
<!--#include file="datastore.asp"-->

<%

Dim strUserID, strPassword
strUserID = trim(Request.form("txtUserID"))
strPassword = trim (Request.form("txtUserPassword"))


Dim objConn
Dim objRs

'check that neither fields are empty. if empty redirect to login screen
'if strUserID = "" or strPassword = "" then Response.Redirect "login.asp?menu=school&userid=" & strUserID & "&again=1"


Set objConn = server.CreateObject("ADODB.Connection")	'Connection object
Set objRs = server.CreateObject("ADODB.Recordset")	'Recordset object

'open the connection object
	if objConn.State = 0 then	'only open if the connection is closed
		objConn.Open strConnect
	end if

'open the SCHOOL table
objRs.Open "SCHOOL", objConn, 3, 3

'filter the recordset
objRs.Filter = "user_id = '" & strUserID & "'"

if objRs.EOF = false then 
	if objRs("password") = strPassword then
		Response.redirect "schmenu.asp?userid=" & strUserID
	else
		if request("again") = "1" then
			response.redirect "register.asp"
		else
			Response.redirect "login.asp?menu=school&userid=" & strUserID & "&again=1&badpw=True"
		end if
	end if
else
	if request("again") = "1" then
		response.redirect "register.asp?notfound=1"		
	else
	
		response.redirect "login.asp?menu=school&again=1"
	end if
end if
%>