if (request.prevPage) client.prevPage = request.prevPage; checkPrevPage("login.html"); login = database.cursor("select id,firstname,lastname from user where "+ "active='Y' and login='"+escQuote(request.username)+ "' and password='"+escQuote(request.password)+"'"); firstname = null; lastname = null; user_found = false; if (login.next()) { client.id = login.id; firstname = login.firstname; lastname = login.lastname; setLoggedIn(); user_found = true; } login.close(); client.username = request.username; client.fullname = firstname+" "+lastname; if (!user_found) redirect("initial.html?ipw=1"); else redirect("tock.html");