asp.net i have some doubt help me please

protected void btnSubmit_Click(object sender, EventArgs e)

{

DataTable dt = new DataTable();

SqlConnection con = new SqlConnection("Data Source=test; Initial Catalog=test");

SqlCommand cmd = new SqlCommand("select * from tablename
where name= '" + txtUserName.Text + "' and
password= '" + txtUserpassword.text + "'",con);

SqlDataAdapter ad = new SqlDataAdapter(cmd);

ad.Fill(dt);

if(dt.Rows.Count>0)

{

Response.Redirect("Account.aspx");

}

else

{

lblerrormsg.Text = "wrong details";

}

}

if you are using stored procedure then

protected void btnSubmit_Click(object sender, EventArgs e)

{

DataSet ds = new DataSet();

ds = obj_login.GetValidateUser("Validate", txtUserName.Text.Trim(), txtUserPassword.Text);

if (ds.Tables[0].Rows.Count > 0)

{

Response.Redirect("Home.aspx");

}

else

{

lblerrormsg.Text = "Invalid UserName or Password!!!";

}
}

public DataSet GetValidateUser(string Fetchtype, string Username, string Userpwd)

{

DataSet ds = new DataSet();

try

{

dbcon.OpenDbConnection();

SqlCommand cmd = new SqlCommand("M_ValidateUser", dbcon.MyCon);

cmd.CommandType = CommandType.StoredProcedure;

SqlParameter p1 = new SqlParameter();

p1.ParameterName = "@FetchType";

p1.DbType = DbType.String;

p1.Direction = ParameterDirection.Input;

p1.Value = Fetchtype;

SqlParameter p2 = new SqlParameter();

p2.ParameterName = "@UserName";

p2.DbType = DbType.String;

p2.Direction = ParameterDirection.Input;

p2.Value = Username;

SqlParameter p3 = new SqlParameter();

p3.ParameterName = "@UserPassword";

p3.DbType = DbType.String;

p3.Direction = ParameterDirection.Input;

p3.Value = Userpwd;

cmd.Parameters.Add(p1);

cmd.Parameters.Add(p2);

cmd.Parameters.Add(p3);

cmd.ExecuteNonQuery();

SqlDataAdapter ad = new SqlDataAdapter(cmd);

ad.Fill(ds);

}

catch (Exception ex)

{

throw ex;

}

finally

{

dbcon.CloseDBConnection();

}

return ds;

}

and the stored procedure will be -

ALTER PROCEDURE [dbo].[M_ValidateUser]

@UserName nvarchar(100) = '',

@UserPassword nvarchar (20) = '',

@FetchType nvarchar(10) = ''

BEGIN

if(@FetchType = 'Validate')

begin

select * from tablename

where User_Name = @UserName and User_Password = @UserPassword

end

END

this code will work.

8 Replies

Know the answer? Post it — somebody with the same question will find it here.

Rohatash Kumar13y ago
Hi,
Please refer the below link:

http://www.c-sharpcorner.com/uploadfile/rohatash/simple-user-login-in-Asp-Net-using-C-Sharp/
0
rachayita jaiswal13y ago
Hi Nizam,

Check your connection string or share you code then we can help you better.
0
Safeer Safeer13y ago
what is this error sir plz.. Fill: SelectCommand.Connection property has not been initialized.
0
Iftikar Hussain13y ago
try like this

SqlCommand c=new SqlCommand("select userName,passWord from tbl_login where userName=@username and password=@password);

Regards,
Iftikar
0
rachayita jaiswal13y ago
protected void btnSubmit_Click(object sender, EventArgs e)
{

DataTable dt = new DataTable();
SqlConnection con = new SqlConnection("Data Source=test; Initial Catalog=test");
SqlCommand cmd = new SqlCommand("select * from tablename
        where name= '" + txtUserName.Text + "' and
        password= '" + txtUserpassword.text + "'",con);
SqlDataAdapter ad = new SqlDataAdapter(cmd);
ad.Fill(dt);
if(dt.Rows.Count>0)
{
Response.Redirect("Account.aspx");
}
else
{
lblerrormsg.Text = "wrong details";
}

}

if you are using stored procedure then
protected void btnSubmit_Click(object sender, EventArgs e)
{
        DataSet ds = new DataSet();

ds = obj_login.GetValidateUser("Validate", txtUserName.Text.Trim(),         txtUserPassword.Text);
if (ds.Tables[0].Rows.Count > 0)
{
Response.Redirect("Home.aspx");
}
else
{
lblerrormsg.Text = "Invalid UserName or Password!!!";
}
    }

public DataSet GetValidateUser(string Fetchtype, string Username, string Userpwd)
{
DataSet ds = new DataSet();
try
{
dbcon.OpenDbConnection();
SqlCommand cmd = new SqlCommand("M_ValidateUser", dbcon.MyCon);
cmd.CommandType = CommandType.StoredProcedure;

SqlParameter p1 = new SqlParameter();

p1.ParameterName = "@FetchType";
p1.DbType = DbType.String;
p1.Direction = ParameterDirection.Input;
p1.Value = Fetchtype;

SqlParameter p2 = new SqlParameter();

p2.ParameterName = "@UserName";
p2.DbType = DbType.String;
p2.Direction = ParameterDirection.Input;
p2.Value = Username;

SqlParameter p3 = new SqlParameter();
p3.ParameterName = "@UserPassword";
p3.DbType = DbType.String;
p3.Direction = ParameterDirection.Input;
p3.Value = Userpwd;

cmd.Parameters.Add(p1);
cmd.Parameters.Add(p2);
cmd.Parameters.Add(p3);
cmd.ExecuteNonQuery();

SqlDataAdapter ad = new SqlDataAdapter(cmd);
ad.Fill(ds);
}
catch (Exception ex)
{
throw ex;
}
finally
{
dbcon.CloseDBConnection();
}
return ds;
}

and the stored procedure will be -

ALTER PROCEDURE [dbo].[M_ValidateUser]
@UserName nvarchar(100) = '',
@UserPassword nvarchar (20) = '',
@FetchType nvarchar(10) = ''
AS
BEGIN
if(@FetchType = 'Validate')
begin
select * from tablename
where User_Name = @UserName and User_Password = @UserPassword
end
END

this code will work.
0
Safeer Safeer13y ago
tbl_login loginId userName passWord and stored procedure like this ALTER PROCEDURE loginadd @userName varchar(50), @passWord varchar(50) as INSERT INTO tbl_login (userName, passWord) VALUES (@userName, @passWord)
0
Safeer Safeer13y ago
when am loggin i got error like this

0
Iftikar Hussain13y ago
Hi,
Please refer the below link

http://www.aspdotnet-suresh.com/2011/12/how-to-create-simple-login-form-using.html

Regards,
Iftikar
0