When the page loads, I check for an empty session variable. If it is empty, I trigger an AJAX function to include a hidden login form with ASP script that becomes visible through JavaScript. This part of the process works smoothly.
Upon submitting the form, I verify if the password field is empty, incorrect, or correct. The validation process functions correctly in this stage as well.
However, despite successfully checking these conditions, attempts to hide the overlay form using either JavaScript or setting VBScript conditional variables prove ineffective.
It seems that clearing the cache by refreshing the page or navigating away after submitting the form removes the overlay, confirming that the session variables have indeed been set.
There are two main issues at hand:
Why doesn't the ASP page refresh every time it is invoked? I test this by toggling a visible text line, saving the form, and then triggering the submit button to invoke the form.
Why do the embedded JS or ASP script variables fail to take effect? I examine the JS code with a console.log to troubleshoot this matter.
Firstly, let's look at the JS code:
function checkLogin() {
var password = document.getElementById("password").value;
var userID = document.getElementById("UserID").value;
if (password != null) {
if (window.XMLHttpRequest) {
var xmlhttp = new XMLHttpRequest();
} else {
var xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
}
xmlhttp.onreadystatechange = function () {
if (this.readyState == 4 && this.status == 200) {
console.log("xxx: " + document.getElementById("session").value);
if (document.getElementById("session").value == true) {
document.getElementById("overlay").style.display = "none";
document.getElementById("login").style.display = "none";
}
document.getElementById("password").innerHTML = password;
}
};
xmlhttp.open("GET", "includes/checkpw.asp?u=" + userID + "&p=" + password);
xmlhttp.send();
}
}
Next, let's observe the content of the include file:
<%
response.expires = -1
set conn = server.createobject("ADODB.connection")%>
<!--- #include virtual=/includes/connpath.asp -->
<%querySQL = "qryselUser"
set recset = conn.execute(querySQL)
if not recset.bof and not recset.eof then
arrUser = recset.getrows
countUser = ubound(arrUser,2)
end if%>
<%if Request.Form("formbtn") = "Cancel" then
Session.Abandon
conn.close()
set conn = nothing
Response.Redirect "default.asp"
end if
querySQL = "qryselUser"
set recset = conn.execute(querySQL)
if not recset.bof and not recset.eof then
arrUser = recset.getrows
countUser = ubound(arrUser,2)
end if%>
<%UserID = cint(request.querystring("u"))
password = request.querystring("p")
if password <> "" then
querySQL = "qryselLogin'" & UserID & "'"
set recset = conn.execute(querySQL)
arrUser = recset.getrows
recset.close
set recset = nothing
if UserID = arrUser(0,0) and password = arrUser(2,0) then
session("id") = arrUser(0,0)
session("level") = arrUser(3,0)
session("lock") = arrUser(4,0)
sessiontrue = true
conn.close()
set conn = nothing%>
<%else
userError = "Either Username or Password is incorrect"%>
<script>console.log("Error")</script>
<%querySQL = "qryselUser"
set recset = conn.execute(querySQL)
arrUser = recset.getrows
countUser = ubound(arrUser,2)
recset.close
set recset = nothing
end if
end if%>
<!--- Form contents --->
I am facing some challenges in this process and would appreciate any guidance or assistance in resolving these issues effectively.