%
'*************************************************************************
' ASP Scripting:
' Filename: handler_login.asp
' Written by: Wilbert Madarang
' Date: January 4, 2002
'*************************************************************************
' Description: This is the main handler for a user login.
'*************************************************************************
' SIDE-EFFECTS: Sets MyEmail session variable upon successful login.
'*************************************************************************
' Revision History:
' 1.0 Change by WM, March 15, 2003
' 1. Change performed so that Failed Login write to Session variable
' "MyLoginFailed" and redirects to the LoginPage.
' 2. Changed so that Session("MyEmail") is persisted.
' CR - October 19, 2003
' 2.0 Added Call to RetriveUserDataFromDB
' 2.1 Added Session("UserDataAccessedFromDB" ) = True
'*************************************************************************
%>
<%
'Obtain the username and password
bLoginSuccessful = false
strEmail = Request("email")
strPassword = Request( "password" )
strSuccessURL = Request( "success_url" )
strFailURL = Request("fail_url")
'Decode strSuccessURL and strFailURL
If strSuccessURL = "" Then
Session( "MyLoginFailed" ) = False
strSuccessURL = DEFAULT_LOGIN_SUCCESSFUL_URL
End If
If strFailURL = "" Then
Session( "MyLoginFailed" ) = True
strFailURL = DEFAULT_LOGIN_FAIL_URL
End If
'Check the Username and Passwords
bLoginSuccessful = validateLogin( strEmail, strPassword )
'Validate Login
If bLoginSuccessful = true Then
'Response.Write "Successful Login.
"
Session( "MyEmail" ) = strEmail
Session( "Authenticated" ) = True
Call retrieveUserDataFromDB( strEmail )
Session("UserDataAccessedFromDB" ) = True
Response.Redirect strSuccessURL
Else
'Response.Write "Unsuccessful Login.
"
Response.Redirect strFailURL
End If
%>