<%

	Username = Request.Cookies("userID")
	Password = Request.Cookies("Password")
	Response.Cookies("chgPassword")= Request.Form("Pass1")
	
	if UserName<>"" then
		if Password<>"" then 
			set conn = Server.CreateObject ("ADODB.Connection")
			conn.Open Application("connString")
			query = "SELECT [UserID], [Password], [Access] FROM Login WHERE UserID='" & UserName & "' AND Password='" & Password & "'"
			set rs = conn.Execute (query)
			
			'	Check if the user and password are valid
			if rs.eof then
				' There is no record to match the UserName and Password
				Response.Write "<p class=errmsg>Invalid user and password!</p>"
				conn.Close
			else
				' User login ok and set the user_id value from the Members table in a session variable
				Response.Cookies("userID") = rs("UserID")
				rs.close
				set rs =  nothing
				
				'	Insert a new password in the login table with the password.
				query = "UPDATE login SET Password = '" & Request.Cookies("chgPassword") & "' WHERE userID='" & UserName & "'"

				query = "UPDATE login SET link = '" & Autoselect.asp & "' WHERE UserID='" & UserName & "' AND Access='" & All & "'"

query = "UPDATE login SET link = '" & chrspecs.asp & "' WHERE UserID='" & UserName & "' AND Access='" & CHR & "'"

query = "UPDATE login SET link = '" & gmspecs.asp & "' WHERE UserID='" & UserName & "' AND Access='" & GM & "'"

query = "UPDATE login SET link = '" & fordspecs.asp & "' WHERE UserID='" & UserName & "' AND Access='" & FORD & "'"
				
				conn.Execute (query)
				
				conn.close
				set conn = nothing
				
				Response.Redirect "newlogin.html"
				end if	
		else
			Response.Write "<p class=errmsg>Please fill both fields.</p>"
		end if
	end if
	
%>