Line 50-53 make it impossible to login/logout from post.asp page.
if Request.QueryString("method") <> "" then
strRqMethod = chkString(Request.QueryString("method"), "SQLString")
else
Response.Redirect("default.asp")
end if
The following code will fix the problem
if Request.QueryString("method") <> "" then
strRqMethod = chkString(Request.QueryString("method"), "SQLString")
elseif not (Request("Method_Type") <> "") then
Response.Redirect("default.asp")
end if
because it caused problems with redirects after logging in/logging out, usually resulting in a person getting stuck in a loop. Why would anyone need to login/logout on the post.asp page? Personally, I wanted to only allow logging in/logging out from default.asp only.