<% Set RS = Conn.Execute("SELECT * FROM User Where UserName='" & Request.FORM("username") & "'") if RS("username") = Request.FORM("username") then if RS("Password") = Request.FORM("password") then Response.write "

Your Message has been posted

" ' Add Users Message Conn.Execute "INSERT INTO Replys (UserID, Subject, MessageBody, PostingID) VALUES(" & RS("UserID") & ", '" & Request.FORM("subject") & "','" & Request.FORM("message") & "'," & "" & Request.FORM("topic") & ")" ' Incress the total posts Conn.Execute "UPDATE Board SET TotalPostings=TotalPostings+1 WHERE BoardID = " & Request.FORM("board") & ";" Conn.Execute "UPDATE Posting SET ReplyCount =ReplyCount+1 WHERE PostingID = " & Request.FORM("topic") & ";" else Response.write "

Invalid Login

Click the back button on your browser to try again" end if else Response.write "

Invalid Login

Click the back button on your browser to try again" end if RS.close Set RS = Nothing Conn.close Set Conn = Nothing %>