ASP Security Login Using Cookies ...

My login_process.asp ...

<%
Dim L_ID, L_Pass, conn, rs
L_ID = Request.Form("member_id")
L_Pass = Request.Form("member_pass")

set conn=Server.CreateObject("ADODB.Connection")
conn.Provider="Microsoft.Jet.OLEDB.4.0"
conn.Open(Server.Mappath("Registration.mdb"))
set rs=Server.CreateObject("ADODB.Recordset")

rs.open "SELECT * from registration WHERE mem_id='"& L_ID & "' AND mem_pass='" & L_Pass & "'", conn

if rs.EOF then
Response.Cookies("LoginError")= "Wrong Member ID or Password"
Response.Redirect("Login_Fail.asp")
else
Response.Cookies("login") = Request.Form("L_ID")
Response.Redirect("Login_Success.asp")
end if

conn.Close
%>

I place this at the top of every page so that only those logged in can view the page ...

<%
if Request.Cookies("mem_id") <> "TRUE" then
Response.Redirect ("Default.asp")
end if
%>

CONCLUSION : IT'S NOT WORKING ...