<%
   'Capture and Assign the username and password value that the user have entered, input to a variable!
    Username = Request.Form("txtUsername")    
    Password = Request.Form("txtPassword")
    
   'If user did not enter anything into the textfield or accidentally press the submit button, alert user with QueryString!
    If Username = "" or Password = "" Then
        Response.Redirect("login.asp?login=bothempty")
    End If

    'MySQL Database connection to retrieve all the information according to the username!
    Dim connectionString, conn, rs
    connectionString = "DRIVER={MySQL ODBC 3.51 Driver}; SERVER=localhost; DATABASE=mydatabase; UID=root; PASSWORD=mypassword;"
    Set conn = Server.CreateObject("ADODB.Connection")
    conn.Open(connectionString)
    Set rs = conn.Execute("SELECT * FROM userlogin where username='"& Username &"'")   

    'If there is no record with the entered username, close connection and go back to main page with QueryString!
    'Or in other words, if the username does not exist in the database, then the system will alert the user!
     If rs.BOF AND rs.EOF Then
        rs.Close
        conn.Close
        set rs=nothing
        set conn=nothing
        Response.Redirect("login.asp?login=usernamefailed")
     End If

    'If entered password exist in the database, close connection and open mainpage (Success Login)
    'ASP will check whether the password entered by the user exist in the database, 
    'If it exist then you will be rediredted to the success page!
     If rs("password") = Password Then
        
        'Assign Session variable value to the entered username for login security!
        'Once you Log Out, the session value will be cleared off in the logout.asp page!
        Session("name") = Request.Form("txtUsername")
        
        rs.Close
        conn.Close
        set rs=nothing
        set conn=nothing
        Response.Redirect("success.asp") 'Redirect user to the success page!
    
    'If entered password does not exist in the database, close connection and return to main page with QueryString!
     Else
        rs.Close
        conn.Close
        set rs=nothing
        set conn=nothing
        Response.Redirect("login.asp?login=passfailed")
     End If
%>