The following section from inc_header.asp seems to have been mixed up and is the cause of the error.
if trim(strDBNTUserName) <> "" and trim(Request.Cookies(strUniqueID & "User")("Pword")) <> "" then
select case Request.Form("Method_Type")
case "login"
if strLoginStatus = 1 then
AUHandleLoging()
end if
case "logout"
AUHandleLoging()
end select
ActiveUserTracker()
chkCookie = 1
mLev = cLng(chkUser(strDBNTUserName, Request.Cookies(strUniqueID & "User")("Pword"),-1))
chkCookie = 0
else
MemberID = -1
mLev = 0
end if
Replace the above code with the following, and it will work.
select case Request.Form("Method_Type")
case "login"
strEncodedPassword = sha256("" & Request.Form("Password"))
select case chkUser(strDBNTFUserName, strEncodedPassword,-1)
case 1, 2, 3, 4
Call DoCookies(Request.Form("SavePassword"))
strLoginStatus = 1
case else
strLoginStatus = 0
end select
case "logout"
Call ClearCookies()
end select
if trim(strDBNTUserName) <> "" and trim(Request.Cookies(strUniqueID & "User")("Pword")) <> "" then
chkCookie = 1
mLev = cLng(chkUser(strDBNTUserName, Request.Cookies(strUniqueID & "User")("Pword"),-1))
chkCookie = 0
else
MemberID = -1
mLev = 0
end if
select case Request.Form("Method_Type")
case "login"
if strLoginStatus = 1 then
AUHandleLoging()
end if
case "logout"
AUHandleLoging()
end select
ActiveUserTracker()
Let me know how it goes.