I had a problem with the system not recognizing the CAPTCHA. I looked in the session table and saw that the session captcha info matched the graphic. For some reason the compare was not working.
I modified the code in Functions_Login.asp around line 115 to this
If ((CStr(LCase(Trim(getSessionItem("SCS")))) = CStr(LCase(Trim(Request.Form("securityCode"))))) AND (getSessionItem("SCS") <> "")) Then
I added the CStr to each term as well as adding the Trim to the getSessionItem("SCS") and that seemed to fix the problem. I now get a reliable compare. I am not sure why this is a problem, but it has been working on and off for a few years now. Something is changing and I am not sure what.
The system is Windows 2000 server sp4 with MSSQL 2000 and the latest SP. I still have one more problem in that when I login as administrator, it shows me as administrator but when I go to login in the admin section, it lets me login and then thinks I am user guest (group 2) and says I do not have permission to continue. Not sure why it is doing that, but I suspect that somewhere it is loosing the session information or cookie info and treating me as a guest. The subroutine getUserData is returning the Guest info. It happens in both IE6 and Firefox.
I have it set to use the SQL server for sessions blnDatabaseHeldSessions = True and also have tried both ways on blnUseApplicationVariables = false with the same problem.
Any ideas on this?
Phil