Login form needs to distinguish between bad email and bad password

Hi Jason,

I'm still having a little trouble with this. First:

Originally Said By: Jason Byrnes

  you are on the right track using validation toolkit.

Create a recordset that filters the email address column against the entered email address.  

What I did is create the recordset (simple view) to use the customer table, use only the email colum, and Filter by "email"(column) = Form variable "username" (I called that form field "username" way back when I first generated the page with SecurityAssist

Was that the right way to configure the recordset? Or should I have used "Entered Value" instead of "Form varible"?

Next, it was still redirecting to the "bad password" page even when the email address was bad.

I tried moving the php code up from where it was (it was formerly underneath the Security Assist "Authenticate user" block of code) up to the top. I thought maybe php was processing the "Authenticate user" block first and preempting the bad-email detection.

Unfortunately, after that, now I get sent to the "bad email" page even when I use a valid email and password.

Could you look at it and tell me what I did wrong?

Thanks.