<% Dim strusername,strPassword strusername = Request.Form("username") StrPassword = Request.Form("Password") dim rsUser,rsadmin dim sqla set rsuser = server.CreateObject("ADODB.RecordSet") sqla = "Select * from userTable where username = '" & strusername & "';" rsUser.open sqla,conn if not rsUser.eof Then 'Checking The Activation of User 'if rsUser("Activation") = "Yes" Then 'Checking Password If UCASE(rsUser("Password")) = UCASE(strPassword) then Dim strName,Value 'Assigning Everything to Session Variable. session("UserId") = rsuser("userid") session("username") = rsuser("username") session("Familyname") = rsuser("familyname") session("totalPet") = 0 response.redirect "Muchoinfo.asp" ELSE Response.Redirect "Login.asp?Again=1&BadPW=True" End if Else Response.Redirect "Login.asp?Again=1" End if rsuser.close %>