<%
  Response.Buffer = true
  Session("DatabasePath") = "Path to your database, put it here. rest will fill in for you"
  If Request.Form("btnLogin") = "Login" AND Request.Form("txtUserName") <> "" AND Request.Form("txtPassword") <> "" Then
 
    Dim conn, strSQL, rs
 
    strUserName = MakeSQLSafe(Trim(Request.Form("txtName")))
    strPassword = MakeSQLSafe(Trim(Request.Form("txtPassword")))
 
    Set conn = Server.CreateObject("ADODB.Connection")
    conn.Open "DRIVER={Microsoft Access Driver (*.mdb)};DBQ=" & Session("DatabasePath") & ";"
 
    strSQL = "SELECT UserName, UserID FROM Users WHERE UserName='" & strUserName & "' AND UserPassword='" & strPassword & "'"
 
    Set rs = Server.CreateObject("ADODB.Recordset")
    rs.Open strSQL, , 0, 2
 
    If Not rs.EOF Then
      Session("logged") = 1
      Session("UserName") = rs("UserName")
      Session("UserID") = rs("UserID")
    Else
      Response.Redirect ("register.asp?login=failed")
    End If
    rs.Close()
    conn.Close()
    set rs = nothing
    set conn = nothing
  Else
    response.redirect ("login.asp?fields=null")
  End If
 
  Function MakeSQLSafe(sender)
    sender = Replace(sender, ";", "")
    sender = Replace(sender, """", "")
    sender = Replace(sender, "'", "")
    sender = Replace(sender, "''", "")
    Return(sender)
  End Function
%>