% Dim strSuccessMsg Dim strErrorMsg strSuccessMsg = request("successmsg") strErrorMsg = request("errormsg") if LCase(request.form("action")) = "process" then 'Process Login Request Dim intLoginCustomerID Dim strPassWord strPassword = request.form("password") intLoginCustomerID = fLoginUser( request.form("email_address"), calcMD5(CStr(strPassword))) if CInt(intLoginCustomerID) <> 0 then Session("CustomerID") = CInt(intLoginCustomerID) If Request("cookies") = "true" Then 'Store the username and password for later use Response.Cookies("usecookies") = "true" Response.Cookies("usecookies").Expires = "01/01/2020" Response.Cookies("username") = request.form("email_address") Response.Cookies("username").Expires = "01/01/2020" Response.Cookies("password") = Replace(strPassword,"'","''") Response.Cookies("password").Expires = "01/01/2020" Else 'Unset the cookie Response.Cookies("usecookies") = "false" Response.Cookies("usecookies").Expires = Date() Response.Cookies("username") = "" Response.Cookies("username").Expires = Date() Response.Cookies("password") = "" Response.Cookies("password").Expires = Date() End If if Request("accessdenied") <> "" then response.Redirect(Request("accessdenied")) else response.Redirect("account.asp?sid=" & strSessionID) end if else strErrorMsg = "ERROR: NO MATCH FOR EMAIL ADDRESS AND / OR PASSWORD." end if end if %> <% strPageTitle = Application("STORE_NAME") & " Login" %>