Forums

ASP

This topic is locked

Redirect from a Shared SSL

Posted 05 Oct 2007 17:28:37
1
has voted
05 Oct 2007 17:28:37 Javier Castro posted:
Hi Guys,

I'm having this odd problem. I have a login page setup on a secure shared environment. When the users login they should be redirected to a page outside the Shared ssl i.e. www.secure.com/mydomain.com/login.asp redirect to www.mydomain.com.

I am using the following script:
<%
' *** Validate request to log in to this site.
MM_LoginAction = Request.ServerVariables("URL"
If Request.QueryString <> "" Then MM_LoginAction = MM_LoginAction + "?" + Server.HTMLEncode(Request.QueryString)
MM_valUsername = CStr(Request.Form("txtUsername")
If MM_valUsername <> "" Then
Dim MM_fldUserAuthorization
Dim MM_redirectLoginSuccess
Dim MM_redirectLoginFailed
Dim MM_loginSQL
Dim MM_rsUser
Dim MM_rsUser_cmd

MM_fldUserAuthorization = "intAccessLevel"
MM_redirectLoginSuccess = "www.mydomain.com"
MM_redirectLoginFailed = "www.secure.com/mydomain.com/login?Failed=True"

MM_loginSQL = "SELECT txtUsername, txtPassword, intUserID, intAccessLevel"
If MM_fldUserAuthorization <> "" Then MM_loginSQL = MM_loginSQL & "," & MM_fldUserAuthorization
MM_loginSQL = MM_loginSQL & " FROM tblUsers WHERE txtUsername = ? AND txtPassword = ?"
Set MM_rsUser_cmd = Server.CreateObject ("ADODB.Command"
MM_rsUser_cmd.ActiveConnection = MM_connProducts_STRING
MM_rsUser_cmd.CommandText = MM_loginSQL
MM_rsUser_cmd.Parameters.Append MM_rsUser_cmd.CreateParameter("param1", 200, 1, 50, MM_valUsername) ' adVarChar
MM_rsUser_cmd.Parameters.Append MM_rsUser_cmd.CreateParameter("param2", 200, 1, 50, Request.Form("txtPassword") ' adVarChar
MM_rsUser_cmd.Prepared = true
Set MM_rsUser = MM_rsUser_cmd.Execute

If Not MM_rsUser.EOF Or Not MM_rsUser.BOF Then
' username and password match - this is a valid user
Session("MM_Username" = MM_valUsername
Session("MM_UserID" = MM_rsUser("intUserID"
Session("MM_intAccessLevel" = MM_rsUser("intAccesslevel"

If (MM_fldUserAuthorization <> "" Then
Session("MM_UserAuthorization" = CStr(MM_rsUser.Fields.Item(MM_fldUserAuthorization).Value)
Else
Session("MM_UserAuthorization" = ""
End If
if CStr(Request.QueryString("accessdenied") <> "" And true Then
MM_redirectLoginSuccess = Request.QueryString("accessdenied"
End If
MM_rsUser.Close
Response.Redirect(MM_redirectLoginSuccess)
End If
MM_rsUser.Close
Response.Redirect(MM_redirectLoginFailed)
End If
%>

Any ideas will be appreciated. Cheers.

Javier

Reply to this topic