Well, there are several codes that make up the login sequence.
If you look in your inc_top.asp file, you will see this bit of code near to the top:select case Request.Form("Method_Type")
case "login"
select case ChkUser2(strDBNTFUserName, Request.Form("Password"))
case 1, 2, 3, 4
Call DoCookies(Request.Form("SavePassword"))
strLoginStatus = 1
case else
strLoginStatus = 0
end select
case "logout"
Call ClearCookies()
end select
The code in red, sends the username and password that the user entered to a function called "ChkUser2" which checks the database to see if thier username and password matches. You can open your inc_functions.asp file and look for the function.
If the function returns the value 1, 2, 3 or 4, that means the username and password matched with the username and password in the database, so it calls the cookie function "DoCookies" which stores the users username and passeord. If it doesn't return one of those numbers then the username and password didn't match.
Hope that helps.
- David