With the code from below I keep getting the following error and I'm at a lose since it appears my parameters are being passed. What I currently have is a login screen where a person logs in and hits submit - then they
go to submitlogin.asp (see full code below) which checks them. Then provided everything is A-OK then move on to nextpage.asp - A database.asp page (see full code below)is used to connect to my SQL 2000 Server - I'm running Windows 2000 Server and as you can see using classic ASP:
Type mismatch: '[string: "SELECT user, pw"]'
/TestWeb/submitlogin.asp, line 18
Browser Type:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Page:
POST 31 bytes to /TestWeb/submitlogin.asp
POST Data:
user=TESTUSER&pw=testpw
<% @LANGUAGE = VBScript %>
<% ' submitlogin.asp
' test if a bill_code and eventually a password were
' entered. If not, transfer back to the login page.
If Request.form( "pw" ) = "" Or _
Request.form( "user" ) = "" Then
Session( "loginFailure" ) = True
Call Server.Transfer( "login.asp" )
End If
Dim connection, loginData
' create the SQL query
Session( "query" ) = _
"SELECT user, pw FROM mydb.dbo.users where user = UPPER'" & _
Request.form("user") & "'" and pw = UPPER'" & _
Request.form("pw") & "'"
Call Server.Execute( "database.asp" )
SetloginData = Session( "loginData" )
If Request( "user" ) = loginData( "user" ) Then
' user is OK, adjust loginFailure
Session( "loginFailure" ) = False
' write a cookie to recognize them the next time they
' go to login.asp
Response.Cookies( "user" ) = Request( "user" )
' give it three days to expire
Response.Cookies( "user" ).Expires = Date() + 3
' send them to nextpage.asp
Call Server.Transfer( "nextpage.asp" )
Else
Session( "loginFailure" ) = True
Call Server.Transfer( "login.asp" )
End If
%>
<% @LANGUAGE = VBScript %>
<%
' database.asp
' ASP document for interacting with the database
Option Explicit
Dim connection, loginData
' provide error handling code
On Error Resume Next
Session( "errorString" ) = ""
Set connection = Server.CreateObject( "ADODB.Connection" )
connection.Mode = 3
Call connection.Open( "TestWeb" )
Call errorHandlerLog()
' create the record set
Set loginData = Server.CreateObject( "ADODB.Recordset" )
Call loginData.Open( Session( "query" ), connection )
Set Session( "loginData" ) = loginData
Call errorHandlerLog()
Sub errorHandlerLog()
If Err.Number <> 0 Then
Dim errorString
errorString = Session( "errorString" )
errorString = errorString & "<p class = " & _
Chr( 34 ) & "error" & Chr ( 34 ) & ">Error (" _
& Err.Number & ") in " & Err.Source & "<br />" & _
Err.Description & "</p><br />"
Session( "errorString" ) = errorString
End If
End Sub
%>
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
seemz something wrong with quotes and braces:
-----
your code:
Session( "query" ) = _
"SELECT user, pw FROM mydb.dbo.users where user = UPPER'" & _
Request.form("user") & "'" and pw = UPPER'" & _
Request.form("pw") & "'"
-----
should be:
Session( "query" ) = _
"SELECT user, pw FROM mydb.dbo.users WHERE user = UPPER('" & _
Request.form("user") & "') AND pw = UPPER('" & _
Request.form("pw") & "')"
kpu8,
Instead of this
Session( "query" ) = _
"SELECT user, pw FROM mydb.dbo.users where user = UPPER'" & _
Request.form("user") & "'" and pw = UPPER'" & _
Request.form("pw") & "'"
Try to use this... auuming that users is your tablename...
Session( "query" ) = "SELECT * FROM users where user = '" & UCase(Request.form("user")
kpu8,
As I go through with your query I notice that user is a reserved word in SQL I did not read thoroughly the question I thought you are using access...
Try to us this...
Session( "query" ) = "SELECT * FROM users where [user] = '" & UCase(Request.form("user")
Below is th elink of all reserved word use in access and MSSQL
http://www.btgi.net/reserv
kpu8,
Below is a simple login validation... The code is tested and you just need to change values an dvariable depending on your db...
Try to check it out...
http://www.experts-exchang
HTH..
Happy programming...
Got this to work - pretty well - the error checking is a tad off - it seemed no matter what I typed into the username and password field - it brought me back to the
login.asp page - so I just commented the err_loginmsg's out and it works - Next, I'll work on getting the rr_loginmsgs to appear in the table and not in the querystring
Business Accounts
Answer for Membership
by: gladxmlPosted on 2003-03-07 at 19:35:53ID: 8092440
kpu8,
If you want to chnage the values to UPPER is not a VB function..