Login.asp

<html>

<head>
<title>Home</title>
</head>
<body>
<form method="post">
Username : <input name="username" type="text"><br>
Password : <input name="password" type="password">
<input type="submit"  value="LogIn" />
</form>


<%

Dim username
Dim password
Dim project

'Getting information from submitted form
username = request.form("username")
password = request.form("password")
project = request.querystring("project")


Dim objconn,objRS,strSQL
Set objconn = Server.CreateObject("ADODB.Connection")
objconn.ConnectionString = "DRIVER=Microsoft Access Driver (*.mdb);DBQ=" & Server.MapPath("db.mdb")
objconn.Open

Set objRs = Server.CreateObject("ADODB.Recordset")
Set rs = Server.CreateObject("ADODB.Recordset")


SQLQuery = "select * from Users where username = '"&username&"' AND password = '"&password&"'"
rs.Open SQLQuery, objconn

   if username = "" then
        response.write "Please Enter your username and password"
    else

    if rs.BOF and rs.EOF then
        response.write "incorrect username or password , please try again"
    else
'Files ID's for Current project
'strSQL = "SELECT FileID FROM Files WHERE ProjectID = "&project&" "
'Files ID's for Current user
'strSQL = "SELECT FileID FROM Permissions WHERE USERID = "&rs("ID")&" "

'Link from Permissions and Files

strSQL = "SELECT Files.FileName FROM Files INNER JOIN Permissions ON Files.FileID = Permissions.FileID WHERE Files.ProjectID = "&project&" AND USERID = "&rs("ID")&""


objRS.Open strSQL, objconn

Do While Not objRS.EOF

response.write "<a href='" & objRs("FileName") & "'><b>" & objRs("FileName") & "</a><br>"
objRS.MoveNext
Loop

objRs.Close
objconn.Close

end if
end if  %>
</body>
</html>