<% 
	Response.Buffer = true
	Response.CacheControl = "no-cache"
    Response.AddHeader "Pragma", "no-cache"
    Response.Expires = -1
IF request.servervariables("HTTPS") = "off" THEN response.redirect("/super-user/control-panel/?secure=1") END IF
	str_u_token = sanitizeRequest("ut","cookie")
	str_u_n = sanitizeRequest("un","cookie")
IF str_u_token <> "" AND str_u_n <> "" THEN
		 'try token login
			dcToken=CUSERDecodeAndDecrypt(str_u_token)
			SET rsTL = dbCBK.Execute("SELECT `userID`,`companyID`,`fullNAME`,`userPOSITION`,`userLEVEL`,`userALLOWED` FROM cbk_config WHERE `userNAME`='"&str_u_n&"' AND `userTOKEN`='"&dcToken&"' limit 1")
		    IF rsTL.EOF THEN
				'remove the cookies
				response.cookies("un")=""
				response.cookies("ut")=""
				response.cookies("ut").Expires = dateAdd("n",-1,now()) 
				response.cookies("un").Expires = dateAdd("n",-1,now()) 
				response.redirect("/super-user/?session=expired")
		    END IF
			DO WHILE NOT rsTL.EOF	
					str_u_id=CInt(rsTL("userID"))
					str_company_id=CInt(rsTL("companyID"))
					str_full_u_name=rsTL("fullNAME")
					str_u_pos=rsTL("userPOSITION")
					str_u_lev=rsTL("userLEVEL")
					str_u_allowed=rsTL("userALLOWED")
					response.cookies("cbk_cid")=CInt(str_company_id)
			rsTL.MoveNext
			loop
			rsTL.Close
			SET rsTL = Nothing
ELSE
	'remove the cookies
	response.cookies("un")=""
	response.cookies("ut")=""
	response.cookies("ut").Expires = dateAdd("n",-1,now()) 
	response.cookies("un").Expires = dateAdd("n",-1,now()) 
	'close silently, well almost ;)
	response.write("-")
	response.end
END IF
IF str_company_id <> "" AND IsNumeric(str_company_id) THEN
	'load company settings or school settings
				 
END IF
%>