% Dim rsLogin__prmUsername rsLogin__prmUsername = "0" if(Request.Form("Username") <> "") then rsLogin__prmUsername = Request.Form("Username") Dim rsLogin__prmPassword rsLogin__prmPassword = "0" if(Request.Form("Password") <> "") then rsLogin__prmPassword = Request.Form("Password") %>

<% Else Dim FirstName, LastName, SchoolName, BDate, queryStatement, OnProfile FirstName = Request.form("fFirstname") LastName = Request.form("fLastname") SchoolName = Request.form("fSchools") If (FirstName = "") OR (LastName = "") OR (SchoolName = "") Then Response.Redirect("login.asp") Else queryStatement = "SELECT * FROM Profiles WHERE " If NOT (FirstName = "") Then queryStatement = queryStatement & "FirstName = '" & FirstName & "' AND " End If If NOT (LastName = "") Then queryStatement = queryStatement & "LastName = '" & LastName & "' AND " End If If NOT (SchoolName = "") Then queryStatement = queryStatement & "Instr(School,'" & SchoolName & "') AND " End If If Right(queryStatement,4) = "AND " Then queryStatement = Left(queryStatement, Len(queryStatement) -4) Else queryStatement = "SELECT * FROM Profiles WHERE Username = 'xyznoname'" End If Set OnProfile = Server.CreateObject("ADODB.Recordset") Query = queryStatement OnProfile.Open Query, Connect, adOpenStatic, adLockReadOnly %> <% If NOT OnProfile.EOF Then%> <% Session("Username") = OnProfile("Username") Response.Redirect("assessment.asp") %> <% Else %> <% Response.Redirect("login.asp") %> <% 'response.write(queryStatement) %> <% End If %> <% End If %> <% End If %>Assessment Login