<% on error resume next dim user_name dim password dim submit dim registerlink dim login_form_sql dim email dim search_btn dim pwd_lookup_sql sub request_login_form ''' request form inputs from this form user_name = request("user_name") password = request("password") submit = request("submit") registerlink = request("registerlink") end sub sub request_pwd_lookup ''' request form inputs from this form email = request("email") search_btn = request("search_btn") action = request("action") end sub sub validate_login_form ''' request and validate data entered from this form user_name = trim(request("user_name")) if user_name = "" then error_list.add "586915","username must be specified." b_error = true end if password = trim(request("password")) if password = "" then error_list.add "586916","password must be specified." b_error = true end if submit = trim(request("submit")) registerlink = trim(request("registerlink")) end sub sub validate_pwd_lookup ''' request and validate data entered from this form email = trim(request("email")) if email = "" then error_list.add "586919","your email address must be specified." b_error = true end if search_btn = trim(request("search_btn")) action = trim(request("action")) end sub sub get_defaults_login_form ''' set default values for this form submit = "LOGIN" registerlink = "click here to register" end sub sub get_defaults_pwd_lookup ''' set default values for this form search_btn = "SEND" action = "lookup" end sub sub db_select_login_form login_form_sql = "SELECT " & _ "user_name, " & _ "password FROM Users" & _ "" end sub do_search = request("do_search") ''' request form keys and inputs user_name = request("user_name") password = request("password") ''' request action action = lcase(request("action")) ''' action case handler select case action case "login" ' verify and select the user from database validate_login_form '' set cookies? if request("set_cookies") = "1" then response.cookies("user_name") = user_name response.cookies("user_name").expires = "12/31/2007" response.cookies("password") = password response.cookies("password").expires = "12/31/2007" end if '' session user_name session("user_name") = user_name do_login case "logout" ' end the user's current session session.abandon response.redirect "../" case "lookup" email = request("email") '' user exist ? set rs = cn.execute ("SELECT user_id, user_name, password, email FROM users where email = '" & email & "'") if not rs.EOF then if len(rs("password")) > 1 then '' send mail with password 'dim sender_email sender_email = "worksourceskc@hotmail.com" recipient_address = email recipient_name = email subject = "Worksourceskc.org Password Request" body = "This email was sent by worksourceskc.org" & vbCrLf & "The password you recently requested for username " & rs("user_name") & " is: " & rs("password") & vbCrLf &vbCrLf&"*DO NOT REPLY TO THIS EMAIL* " '' call sendmail function in 'i_smtp.asp' retVal = SendCDOMail(recipient_name , sender_email , subject , body) 'retVal = sendCDONTSmail(recipient_name, recipient_address, sender_name, sender_address, subject, body) if retVal = true then msg_list.add "lookup", "Your password has been emailed to you at: " & email else b_error = true error_list.add "lookup", "Sendmail failed. Your password was not sent. " & retVal end if else '' email exists, but no username/password '' get user_id and redirect to update user account response.redirect "register.asp?msg=You+need+to+create+a+username+and password+for+your+account&email=" & email end if else '' user not found b_error = true error_list.add "lookup", "No user account was found for """ & email & """" end if rs.Close end select ':: handle the default case(s) for each form (separate from action= parameter) get_defaults_login_form get_defaults_pwd_lookup %> WorkSource Staff Connections - WorkSource Seattle King County


<% display_errs display_msg %> ">
Please Login for Access
username
password
  remember me for next login


Password Lookup
your email address
<% ':: assure that any db resources are freed on error resume next rs.Close set rs = NOTHING cn.Close set cn = NOTHING user_cn.Close set user_cn = NOTHING on error goto 0 %>