<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%> <% func = request.querystring("func") errormsg = session("errormsg") session("errormsg") = vbnullstring c_username = Request.Cookies("Cyclorizon")("Username") if session("accountLockout") = vbnullstring then session("accountLockout") = 0 select case func case FUNC_SPECIAL session("accountLockout") = session("accountLockout") + 1 if session("accountLockout") > 3 then errormsg = "Nombre maximum de tentatives d'accès invalides atteint!" else username = replace(request.form("username"), "'", "'") userpw = replace(request.form("userpw"), "'", "''") sql = "select * from Member where memName = '" & username & "'" set rs = conn.execute(sql) if not rs.eof then if userpw = decode(rs("memPassword")) then ' variables de session session("memID") = rs("memID") session("memName") = rs("memName") session("memLevel") = rs("memLevel") ' mise à jour des stats du membre sql = "update member set memLastActive = '" & now & "' where memID = " & session("memID") conn.execute(sql) if LOGACCESS = "ON" then sql = "insert into log (memID, memName, memLogonDate) values (" & session("memID") & ", '" & session("memName") & "', '" & now & "')" conn.execute(sql) end if ' on garde dans le cookie le nom de l'utilisateur Response.Cookies(COOKIE_NAME).Expires = Date() + 365 Response.Cookies(COOKIE_NAME)("Username") = username else errormsg = "Identifiant ou mot de passe invalide!" end if else errormsg = "Identifiant ou mot de passe invalide!" end if if errormsg = "" then if session("pageredir") <> vbnullstring then pageredir = session("pageredir") session("pageredir") = vbnullstring response.redirect(pageredir) else response.redirect(CMS_PATH & "default.asp") end if end if end if end select %>