creating a login form

Question

Hi,

I have created a window application. I have to provide security to it. I have to provide a login form with username and password. The username and password are present in the database. When i click the login button it should compare the username and password entered in the form with that in database and give access to the Window application that i first created. How to do it.
Please help

Nitin Raj Bidkikar

Suthish Nair · Answer

Kamil, post your question as a new thread.

Kamil Zahid · Answer

Hi Guys This is the code i have used and it always prompts me with "Invalid username or password" even though my database holds the correct username and password. Please help??? private void button1_Click(object sender, EventArgs e) { string username = textBox1.Text; string password = textBox2.Text; if (ValidateUserNamePassword(username, password)) { MessageBox.Show("Login successful"); } else { MessageBox.Show("Invalid user name or password"); return; } } public bool ValidateUserNamePassword(string username, string password) { MySqlConnection cn = new MySqlConnection(@"SERVER=localhost;" + "DATABASE=clientmanagement;" + "UID=root;" + "PASSWORD=qwerty;"); { MySqlCommand cmd = new MySqlCommand(); cmd.Connection = cn; cmd.CommandType = CommandType.StoredProcedure; cmd.CommandText = "tsp_GetUserNameAndPassword"; MySqlParameterCollection sqlParams = cmd.Parameters; sqlParams.AddWithValue("@UserName", username); sqlParams.AddWithValue("@Password", password); cn.Open(); MySqlDataReader dr = cmd.ExecuteReader(CommandBehavior.SingleRow); if (dr.Read()) { // this will return true if a row matching the username and password is found. // this means that the user's input is valid return true; } else { return false; } dr.Close(); cn.Close(); } } private void button2_Click(object sender, EventArgs e) { Application.Exit(); } } }

nitin bidkikar · Answer

thanks a lot

Ryan Alford · Answer

very simple. in the "ok" or "logon" button's Click_Event on the Login page, put this code in: string username = txtUserName.Text; string password = txtPassword.Text; if ( ValidateUserNamePassword(username, password) ) { // move to next form or do whatever you need to do after a successfull login } else { MessageBox.Show("Invalid user name or password", "Invalid Login"); return; } create a method called "ValidateUserNamePassword" and have it accept two string parameters and return a boolean value, then run your query/stored procedure. I will do a stored procedure called "tsp_GetUserNameAndPassword". public bool ValidateUserNamePassword(string _username, string _password) { string connectionString = "Data Source=[servername];Initial Catalog=[databaseName];User ID=[Admin Login];Password=[Admin Password];"; using (SqlConnection cn = new SqlConnection(connectionString); { SqlCommand cmd = new SqlCommand(); cmd.Connection = cn; cmd.CommandType = CommandType.StoredProcedure; cmd.CommandText = "tsp_GetUserNameAndPassword"; SqlParameterCollection sqlParams = cmd.Parameters; sqlParams.AddWithValue("@UserName", _username); sqlParams.AddWithValue("@Password", _password); cn.Open(); SqlDataReader dr = cmd.ExecuteReader(CommandBehavior.SingleRow); if (dr.Read()) { // this will return true if a row matching the username and password is found. // this means that the user's input is valid return true; } else { return false; } dr.close(); cn.close(); } } then your Stored Procedure will look something like this: set ANSI_NULLS ON set QUOTED_IDENTIFIER ON GO ALTER PROCEDURE [dbo].[tsp_GetUserNameAndPassword] @UserName varchar(15) -- or whatever the datatype is @Password varchar(25) -- or whatever the datatype is AS SELECT UserName , Password FROM [TableName] WHERE UserName = @UserName Password = @Password that should work for you.

creating a login form

Answers (4)