hello-

i am developing an application where the end user needs to login using their username and password in order to edit a record in a sql200 database. The username and password is stored in a table in the same sql200 database.

My question is this, and please forgive me if this is the wrong forum or a very simple question...but how can i validate the username/password prior to admiting the user to the page where they can edit the record? Is there a best practice out there ( or better yet an example) which can help me?

Any guidance would be appreciated.

thank you,

Mike

1..Apply JS validation to the fields where you ask for the UN and PW
2..Post variables to a page
3..Then Do something like:
-----------Assumes you have an created a connection (conn)-----------
<% 'form variables posted to this page (UN & PW)
   'is there a record in the DB that matches the variables
   sql = "SELECT id,uName,pWord FROM userTable WHERE uName = '" & trim(request.form("name")) & "' AND pWord = '" & trim(request.form("pWord")) & "';"
   'execute query
   set getInfo = conn.execute(sql)
   if getInfo.EoF then
      'details not found - chuck em out
      response.redirect("loginFailed.asp")
   else
     'details found - let em in
      response.redirect("loggedIn.asp?uId=" & getInfo(0) & "")
   end if
%>
-----------------------------------------------------------
Note : The ID of the user is in the getInfo(0) QS value

Wind is your friend
Matt

Matt-

Thank you Thank you Thank you!! This worked perfectly.

I may ask your help again if I need help keeping the enduser's session alive thru the process which i plan to tackle next. :)

Many thanks once again in helping me to get this off the ground

- mike

NO worries - glad to help

Wind is your friend
Matt