<% Set RS = Conn.Execute("SELECT * FROM User Where UserName='" & Request.FORM("username") & "'") if RS("username") = Request.FORM("username") then if RS("Password") = Request.FORM("password") then Response.write "

Your Message has been posted

" ' Add Users Message Conn.Execute "INSERT INTO Posting (BoardID, UserID, subject, MessageBody) VALUES(" & Request.FORM("board") & "," & RS("UserID") & ", '" & Request.FORM("subject") & "','" & Request.FORM("message") & "')" else Response.write "

Invalid Login

Click the back button on your browser to try again" end if else Response.write "

Invalid Login

Click the back button on your browser to try again" end if RS.close Conn.close %>