<% Set RS = Server.CreateObject("ADODB.Recordset") MySql="SELECT * FROM Posters" Rs.Open MySql, my_conn do until rs.eof if (ucase(rs("Poster"))=ucase(trim(request.form("name")))) and (rs("Password")=trim(request.form("password"))) then session("name")=rs("Poster") MySql="Update Posters Set [Last Login]=#" & now & "# where ucase([Poster])='" & ucase(trim(request.form("name"))) & "'" my_conn.execute (MySql) my_conn.close response.redirect "index.asp" end if rs.movenext loop my_conn.close response.redirect "login.asp?s=no" %>