var con;
var conString;
con = Server.CreateObject("ADODB.Connection");
conString = "Provider=Microsoft.Jet.OLEDB.4.0; "+ "Data Source= " + Server.MapPath("/negozio.mdb");
con.Open(conString);
var n, p;
n=Request.Form("nick");
p=Request.Form("pass");
var sSQLString;
Response.write (" "+n+"</br>");
Response.write (" "+p+"</br>");
var rst;
var sSQLString;
rst = Server.CreateObject("ADODB.Recordset");
sSQLString = "SELECT * FROM utenti WHERE nick='"+n+"' AND pwd='"+p+"';";
Response.write (" "+sSQLString+"</br>");
rst = con.Execute(sSQLString);
if(rst.EOF)
{Response.write ("Password errata, reinserire la password corretta");
Response.AddHeader ("Refresh", "5;URL=login.asp"); 
con.Close( );
con = null;
}
else {Response.write ("Salve " + n + " benvenuto, tra un attimo potra accedere alle opzioni del sito");
Response.AddHeader ("Refresh", "5;URL=home.asp"); 
con.Close( );
con = null;
}