how to redirect to perticular page using auithenication

jignesh kadvani

i want to redirect to other page like if user enter admin credential then he must be redirected to admin home page. and if user is non admin then he must be redirected to user home page in c#.

i have created one table with the filed

UId UName Pwd Type

1 ABC ABC123 ADMIN

2 XYZ XYZ123 USER

i have tried to write code as below:

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data.SqlClient;
using System.Data;

public partial class _Default : System.Web.UI.Page
{
SqlConnection con = new SqlConnection(@"Data Source=.\SQLEXPRESS;Initial Catalog=MySampleDB;Integrated Security=True;Pooling=False");

protected void Button1_Click(object sender, EventArgs e)
{
con.Open();
SqlDataAdapter ad = new SqlDataAdapter("select UName,Pwd,Type from Table1 where UName='" + TextBox1.Text + "' AND Pwd='" + TextBox2.Text + "'", con);
DataSet ds = new DataSet();
ad.Fill(ds);
if (ds.Tables[0].Rows.Count > 0)
{

if (ds.Tables[0].Rows[0]["Type"].ToString() == "ADMIN")
{
Response.Redirect("Default2.aspx");
}

else
{

Response.Redirect("Default3.aspx");
}
}

else
{
Response.Write("('wrong username and password')");
}

}

}

when i enter admin credential it suppose to redirect to Default2.aspx but it is redirected to Default3.aspx

14 Replies

Know the answer? Post it — somebody with the same question will find it here.

Vincent Maverick Durano10y ago
Glad to know it worka now :)

If your issue ia resolved please dont forget to close this thread by marking a post which helps you as answer.

Thanks.
0
jignesh kadvani10y ago
yes problem is solved i've just added trim(). my complete code is below and it works fine..

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data.SqlClient;
using System.Data;

public partial class _Default : System.Web.UI.Page
{
protected void Button1_Click(object sender, EventArgs e)
{
SqlConnection con = new SqlConnection(@"Data Source=.\SQLEXPRESS;Initial Catalog=MySampleDB;Integrated Security=True;Pooling=False");
SqlDataAdapter ad = new SqlDataAdapter("select * from Table1 where UName='" + TextBox1.Text + "' AND Pwd='" + TextBox2.Text + "'", con);
DataSet ds = new DataSet();
ad.Fill(ds);
if (ds.Tables[0].Rows.Count > 0)
{
string role = ds.Tables[0].Rows[0]["Type"].ToString();

if (role.Trim().ToUpper() == "ADMIN")
{
Response.Redirect("Default2.aspx");
}

else if (role.Trim().ToUpper() == "USER")
{
Response.Redirect("Default3.aspx");
}
}
else
{
Response.Write("alert('wrong username and password')");
}
}

}
0
jignesh kadvani10y ago
it return ADMIN
0
Vincent Maverick Durano10y ago
There's no need because this is a very simple issue. The real issue here is to verify the value returned from your Database.

What's the value when you set a break point?
0
jignesh kadvani10y ago
yes i've put a breakpoint and debug. if you give me your e-mail address i can send you my application folder
0
Vincent Maverick Durano10y ago
the value does not return an "ADMIN". That simple.

How do you debug your codes? Did you set a break point? Did you see the actual value returned?

Note that "ADIMIN" is NOT equal to "ADMIN". please verify the values by setting a break point
0
jignesh kadvani10y ago
vincent i did as you say but still problem is same. cursor directly goes to Default3.aspx
0
Vincent Maverick Durano10y ago
put a break point inside your If statement. Now if this line is TRUE:

if (ds.Tables[0].Rows[0]["Type"].ToString() == "ADMIN")

It should goes to the inner code that redirects to Default2.aspx. If not it will go to your else statement which redirect to Default3.aspx

I would suggest you to debug the value returned in this code: ds.Tables[0].Rows[0]["Type"].ToString()

or better yet assigned it to a variable before you compare. For example:

if (ds.Tables[0].Rows.Count > 0)
{
string role = ds.Tables[0].Rows[0]["Type"].ToString();
if ( role.ToUpper() == "ADMIN")
{
Response.Redirect("Default2.aspx");
}
else
{
Response.Redirect("Default3.aspx");
}
}

0
jignesh kadvani10y ago
if(ds.Tables[0].Rows[0]["Type"].ToString()=="ADMIN") condition is true when i debug then cursor directly jump to Respon.Write("Default3.aspx");
0
jignesh kadvani10y ago
when i debug it directly goes to Responce.Write("Default3.aspx"); instead of Default2.aspx
0
Vincent Maverick Durano10y ago
So when you debug does it goes inside that condition where you put Response.Redirect("Default2.aspx");?

If it does then check your Default2.aspx page and see if you have a logic there that redirects to Default3.aspx
0
jignesh kadvani10y ago
yes it return ADIMIN
0
Vincent Maverick Durano10y ago
First off, I would not recommend you on appending the textbox value directly to you sql query because that can lead you to Sql Injection attack. Instead use parameterized query for security

Second, make use of the using statement when dealing with object that eats resource such as SqlConnection and SqlDataAdapter. This will ensure that the object is properly disposed after using it and closes the connection.

Third, use a DataTable instead of DataSet if you are only dealing with a single table result set.

Finally, I would suggest you to debug your code at the line where you have this condition:

if (ds.Tables[0].Rows[0]["Type"].ToString() == "ADMIN")

Keep in mind that Rows[0] refers to the first row of the result set so make sure that you get the desired value to compare.
0
Pradeep Sahoo10y ago
Please debug the code , and see what is the value of the expression on which the response .redirect is determined .
if (ds.Tables[0].Rows[0]["Type"].ToString() == "ADMIN")
{
}

Is ds.Tables[0].Rows[0]["Type"].ToString() returning "ADMIN" ?
0