using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Web.Security;
using System.Data.SqlClient;
using System.Data.OleDb;
using System.Configuration;
 
namespace TrackMyFood
{
	/// <summary>
	/// Summary description for WebForm1.
	/// </summary>
	public class uLogin : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.TextBox txtUserName;
		protected System.Web.UI.WebControls.RequiredFieldValidator rvUserValidator;
		protected System.Web.UI.WebControls.TextBox txtPassword;
		protected System.Web.UI.WebControls.RequiredFieldValidator rvPasswordValidator;
		protected System.Web.UI.WebControls.Button cmdSubmit;
		protected System.Web.UI.WebControls.ValidationSummary Validationsummary1;
		protected System.Web.UI.WebControls.Label lblMessage;
		protected System.Web.UI.WebControls.Label lblMessage2;
 
		private void Page_Load(object sender, System.EventArgs e)
		{
			// Put user code to initialize the page here
		}
 
		#region Web Form Designer generated code
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: This call is required by the ASP.NET Web Form Designer.
			//
			InitializeComponent();
			base.OnInit(e);
		}
 
		/// <summary>
		/// Required method for Designer support - do not modify
		/// the contents of this method with the code editor.
		/// </summary>
		private void InitializeComponent()
		{	
			this.cmdSubmit.Click += new System.EventHandler(this.cmdSubmit_Click);
			this.Load += new System.EventHandler(this.Page_Load);
 
		}
		#endregion
 
		private void cmdSubmit_Click(object sender, System.EventArgs e)
		{
			if (Page.IsValid)
			{
				if (DBConnection(txtUserName.Text.Trim(), txtPassword.Text.Trim()))
				{
					FormsAuthentication.RedirectFromLoginPage (txtUserName.Text, false);
				}
				else
				{
					lblMessage.Text = "Invalid Login, please try again!";
				}
			}
 
		}
		private bool DBConnection(string txtUser, string txtPass)
		{
			OleDbConnection myConn = new OleDbConnection(ConfigurationSettings.AppSettings["Nutrition"]);
			OleDbCommand myCmd = new OleDbCommand("sp_ValidateUser", myConn);
			myCmd.CommandType = CommandType.StoredProcedure;
 
			OleDbParameter objParam1;
			OleDbParameter objParam2;
			OleDbParameter returnParam;
 
			objParam1 = myCmd.Parameters.Add ("@UserName", OleDbType.Char);
			objParam2 = myCmd.Parameters.Add ("@Password", OleDbType.Char);
			returnParam = myCmd.Parameters.Add ("@Num_of_User", OleDbType.Integer);
 
			objParam1.Direction = ParameterDirection.Input;
			objParam2.Direction = ParameterDirection.Input;
			returnParam.Direction = ParameterDirection.ReturnValue;
 
			objParam1.Value = txtUser;
			objParam2.Value = txtPass;
 
			try
			{
				if (myConn.State.Equals(ConnectionState.Closed))
				{
					myConn.Open();
					myCmd.ExecuteNonQuery();
				}
				if ((int)returnParam.Value < 1)
				{
					lblMessage.Text = "Invalid Login!";
					return false;
				}
				else
				{
					myConn.Close();
					return true;
				}
			}
			catch (Exception ex)
			{
				lblMessage2.Text = ex + "Error Connecting to the database";
				return false;
			}
 
		}
	}
}

SELECT COUNT(*) AS Num_of_User
FROM tblUser
WHERE (((tblUser.U_Name)=[@UserName]) AND ((tblUser.U_Password)=[@Password]));

myCmd.ExecuteNonQuery();