<%
Set conn = Server.CreateObject("ADODB.Connection")
conn.ConnectionString = "Provider=Microsoft.JET.OLEDB.4.0; DATA SOURCE = " & Server.Mappath("dados/mectrol.mdb") & ""
conn.Open
Select Case Request.QueryString("cmd")
Case "login"
Login()
Case "sair"
Logout()
End Select
Public Function Login()
usuario = Replace(Request.Form ("usuario"),"'","")
senha = Replace(Request.Form ("senha"),"'","")
Set rs = Server.CreateObject("ADODB.Recordset")
SQL = "SELECT * FROM usuarios WHERE usuario = '"&usuario&"'"
rs.Open SQL,conn
If rs.EOF Then
Response.Redirect("login.asp?erro=1")
Else
senha_d = rs("senha")
If Not senha_d = senha Then
Response.Redirect("login.asp?erro=1")
Else
If rs("bloqueado") = TRUE Then
Response.Redirect("login.asp?erro=1")
Else
Session("autenticacao") = TRUE
Session("nome") = rs("nome")
Response.Redirect("news/principal.asp")
End If
End If
End If
End Function
Public Function Logout()
Session.Abandon()
Response.Redirect("login.asp")
End Function
Function FormataData(data)
FormataData = Day(data)&"-"&Ucase(Left(MonthName(Month(data)),1))&Mid(MonthName(Month(data)),2,2)&"-"&Right(Year(data),2)
End Function
%>
