Ad:

ASP.NET Discussion Thread
Unsolved
Views: 3660

Jan 16th, 2008

Authenticate Username and Password

Expand Post »

Iam creating a programme in Visual Web Developer 2005. In that am creating a login pager where the user has to give the username and password to enter. The username and password i have stored in Access Mdb.How to connect to database and check whether the username and password is valid?

Can somebody help on this please.........

Similar Threads

mysql_query(): supplied argument is not a valid MySQL-Link in PHP
Password in Visual Basic 4 / 5 / 6
html/php form for .htaccess validation in PHP
Netgear wireless network - help! in Networking
Win XP Pro, how to change workgroup user in Windows NT / 2000 / XP

Sur62

Reputation Points: 10

Solved Threads: 0

Newbie Poster

Offline

3 posts
since Jan 2008

Permalink

Jan 16th, 2008

Re: Authenticate Username and Password

great example for login
http://www.daniweb.com/forums/thread6028.html

ProfessorPC

Reputation Points: 31

Solved Threads: 29

Posting Whiz in Training

Offline

270 posts
since Dec 2007

Permalink

Jan 16th, 2008

Re: Authenticate Username and Password

ASP.NET Syntax (Toggle Plain Text)
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Data.OleDb" %>
<script language="VB" runat="server">
sub btnLogin_Click(sender as Object, e as EventArgs)
if tbPassword.length > 0 and tbUserName > 0 then
    Dim connString as String
    connString = "PROVIDER=Microsoft.Jet.OLEDB.4.0;DATA SOURCE=" & _
                   "C:\Inetpub\wwwroot\Projects.mdb;"
 
    Dim objConnection as OleDbConnection
    objConnection = New OleDbConnection(connString)
    'Specify our SQL statement
    Dim strSQL as String = "SELECT UserPassword FROM Users WHERE UserName=?"
 
    'Create the Command object
    Dim objCommand as OleDbCommand
    objCommand = New OleDbCommand(strSQL, objConnection)
    objCommand.Parameters.AddWithValue( "?UserName", Trim(tbUserName.Text) )
 
    objConnection.Open()   'open the connection
    Dim strPassword As String = objCommand.ExecuteScalar()
 
    if (String.Compare(strPassword, Trim(tbPassword.Text), False) = 0 then
        'login was a success.
    else
        'login failed.
    end if
else
    'login failed due to no or not enough parameters
end if
</script>
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Data.OleDb" %>
<script language="VB" runat="server">
sub btnLogin_Click(sender as Object, e as EventArgs)
if tbPassword.length > 0 and tbUserName > 0 then
    Dim connString as String
    connString = "PROVIDER=Microsoft.Jet.OLEDB.4.0;DATA SOURCE=" & _
                   "C:\Inetpub\wwwroot\Projects.mdb;"
  
    Dim objConnection as OleDbConnection
    objConnection = New OleDbConnection(connString)
    'Specify our SQL statement
    Dim strSQL as String = "SELECT UserPassword FROM Users WHERE UserName=?"
    
    'Create the Command object
    Dim objCommand as OleDbCommand
    objCommand = New OleDbCommand(strSQL, objConnection)
    objCommand.Parameters.AddWithValue( "?UserName", Trim(tbUserName.Text) )

    objConnection.Open()   'open the connection
    Dim strPassword As String = objCommand.ExecuteScalar()

    if (String.Compare(strPassword, Trim(tbPassword.Text), False) = 0 then
        'login was a success.
    else
        'login failed.
    end if
else
    'login failed due to no or not enough parameters
end if
</script>

This performs a basic search of your mdb and grabs the password corresponding to the username. If no username exists, it will return false as strPassword will be Null or an empty string. String.Compare will return "0" if it is a success, and will return -1 or 1 if it is a failure.

Should be the simplest and quickest login you can do

SheSaidImaPregy

Reputation Points: 43

Solved Threads: 68

Veteran Poster

Offline

1,080 posts
since Sep 2007

Permalink

Jan 16th, 2008

Re: Authenticate Username and Password

This Code has to be written in login.aspx or in web.config file, Can you clarify please. Since am new to this if you could help me by giving the steps it would be of great help.

Thanks.

Click to Expand / Collapse Quote originally posted by SheSaidImaPregy ...

ASP.NET Syntax (Toggle Plain Text)
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Data.OleDb" %>
<script language="VB" runat="server">
sub btnLogin_Click(sender as Object, e as EventArgs)
if tbPassword.length > 0 and tbUserName > 0 then
    Dim connString as String
    connString = "PROVIDER=Microsoft.Jet.OLEDB.4.0;DATA SOURCE=" & _
                   "C:\Inetpub\wwwroot\Projects.mdb;"
 
    Dim objConnection as OleDbConnection
    objConnection = New OleDbConnection(connString)
    'Specify our SQL statement
    Dim strSQL as String = "SELECT UserPassword FROM Users WHERE UserName=?"
 
    'Create the Command object
    Dim objCommand as OleDbCommand
    objCommand = New OleDbCommand(strSQL, objConnection)
    objCommand.Parameters.AddWithValue( "?UserName", Trim(tbUserName.Text) )
 
    objConnection.Open()   'open the connection
    Dim strPassword As String = objCommand.ExecuteScalar()
 
    if (String.Compare(strPassword, Trim(tbPassword.Text), False) = 0 then
        'login was a success.
    else
        'login failed.
    end if
else
    'login failed due to no or not enough parameters
end if
</script>
<%@ Import Namespace="System.Data" %> <%@ Import Namespace="System.Data.OleDb" %> <script language="VB" runat="server"> sub btnLogin_Click(sender as Object, e as EventArgs) if tbPassword.length > 0 and tbUserName > 0 then Dim connString as String connString = "PROVIDER=Microsoft.Jet.OLEDB.4.0;DATA SOURCE=" & _ "C:\Inetpub\wwwroot\Projects.mdb;" Dim objConnection as OleDbConnection objConnection = New OleDbConnection(connString) 'Specify our SQL statement Dim strSQL as String = "SELECT UserPassword FROM Users WHERE UserName=?" 'Create the Command object Dim objCommand as OleDbCommand objCommand = New OleDbCommand(strSQL, objConnection) objCommand.Parameters.AddWithValue( "?UserName", Trim(tbUserName.Text) ) objConnection.Open() 'open the connection Dim strPassword As String = objCommand.ExecuteScalar() if (String.Compare(strPassword, Trim(tbPassword.Text), False) = 0 then 'login was a success. else 'login failed. end if else 'login failed due to no or not enough parameters end if </script>
This performs a basic search of your mdb and grabs the password corresponding to the username. If no username exists, it will return false as strPassword will be Null or an empty string. String.Compare will return "0" if it is a success, and will return -1 or 1 if it is a failure.

Should be the simplest and quickest login you can do

Sur62

Reputation Points: 10

Solved Threads: 0

Newbie Poster

Offline

3 posts
since Jan 2008

Permalink

Jan 16th, 2008

Re: Authenticate Username and Password

that is written in an aspx file. the web.config file are just configuration settings and a place to store information you use frequently, like connection strings!

SheSaidImaPregy

Reputation Points: 43

Solved Threads: 68

Veteran Poster

Offline

1,080 posts
since Sep 2007

Permalink

Jan 16th, 2008

Re: Authenticate Username and Password

Put that information on an aspx file and change the connection string and your database name. Then build a form or modify the tbUserName and tbPassword elements of the sub function to the already in place textboxes on your current form. On your form, make the submit button an asp.net control and make it like the following:

ASP.NET Syntax (Toggle Plain Text)
<asp:Button id="btnLogin" Text="Login" OnClick="btnLogin_Click" runat="server" />
<asp:Button id="btnLogin" Text="Login" OnClick="btnLogin_Click" runat="server" />

Since this is a button runat the server, when you click it, it will called the sub "btnLogin_Click" which will run the code within that sub. It is up to you to do any changes you wish for when the user successfully logs in and when the user fails to login. I would suggest creating a label called "lblError" and setting the visibility to false. That way if a user fails to login, you can then add the code to the sub function (btnLogin_Click) to set the lblError.Visibility = true and lblError.Text = "Failed to login. Try again" or something. If the user successfully logs in, set their ID or something in a session. This way you can keep people out of protected areas by checking to see if the session either exists or contains certain information. An example of this would be:

ASP.NET Syntax (Toggle Plain Text)
Session("userGood") = True
or
Session("userID") = "18279283749"
 
' Then
if Not Session("userGood") = True then response.redirect("/login.aspx")
 
'or
if Session("userID").length <= 0 or Session("userID") Is Nothing then response.redirect("/login.aspx")
Session("userGood") = True
or
Session("userID") = "18279283749"

' Then
if Not Session("userGood") = True then response.redirect("/login.aspx")

'or
if Session("userID").length <= 0 or Session("userID") Is Nothing then response.redirect("/login.aspx")

SheSaidImaPregy

Reputation Points: 43

Solved Threads: 68

Veteran Poster

Offline

1,080 posts
since Sep 2007

Permalink

Jan 17th, 2008

Re: Authenticate Username and Password

Quote ...

using System;
using System.Data;
using System.Data.OleDb;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class _Default : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{

}
protected void Login_Authenticate(object sender, AuthenticateEventArgs e)
{
OleDbConnection myconnection = new OleDbConnection();
myconnection.ConnectionString = ConfigurationManager.ConnectionStrings["LBLDatabaseConnectionString"].ConnectionString;

OleDbCommand mycommand = new OleDbCommand();
mycommand.CommandText = "SELECT * FROM SYSTEMUSER WHERE SystemUser_Name=?";
mycommand.Parameters.Add("SystemUser_Name", OleDbType.VarChar, 255, "SystemUser_Name");
mycommand.Parameters["SystemUser_Name"].Value = this.Login1.UserName;

mycommand.Connection = myconnection;

OleDbDataAdapter myadapter = new OleDbDataAdapter(mycommand);

DataSet mydataset = new DataSet();

OleDbCommandBuilder mycommandbuilder = new OleDbCommandBuilder(myadapter);

//myadapter.Fill(mydataset);
myadapter.Fill(mydataset, "SYSTEMUSER");

if (mydataset.Tables["SYSTEMUSER"].Rows.Count == 1)
{

if (string.Compare(mydataset.Tables["SYSTEMUSER"].Rows[0]["SystemUser_Password"].ToString(), this.Login1.Password) == 0)
{
e.Authenticated = true;

if (mydataset.Tables["SYSTEMUSER"].Rows[0]["SystemUser_Type"].ToString() == "Customer")
{
Session["CustomerID"] = mydataset.Tables["SYSTEMUSER"].Rows[0]["SystemUser_ID"];
this.Login1.DestinationPageUrl = "~/Customer/ViewProfile.aspx";
}
else if (mydataset.Tables["SYSTEMUSER"].Rows[0]["SystemUser_Type"].ToString() == "Administrator")
{
Session["UserID"] = mydataset.Tables["SYSTEMUSER"].Rows[0]["SystemUser_ID"];
this.Login1.DestinationPageUrl = "~/PowerUser/PowerUserMain.aspx";
}
else if (mydataset.Tables["SYSTEMUSER"].Rows[0]["SystemUser_Type"].ToString() == "Employee")
{
Session["UserID"] = mydataset.Tables["SYSTEMUSER"].Rows[0]["SystemUser_ID"];
this.Login1.DestinationPageUrl = "~/User/ViewRewardItem.aspx";
}

}
}
}
}

Hope this can help you...

happy8899

Reputation Points: 10

Solved Threads: 0

Newbie Poster

Offline

24 posts
since Aug 2006

Permalink

Jan 17th, 2008

Re: Authenticate Username and Password

Yeah, basically same concept. Mine is in VB.NET and his is in C#. Don't mix them, it won't work.

Anyway, Happy8899, two questions.. why are you using the dataset for this and why are you selecting everything in the row pertaining to that user if you are only using column[0]?

Datasets use up so much resources. a scalar would only grab one value, but that seems like you're only wanting one value anyway!

SheSaidImaPregy

Reputation Points: 43

Solved Threads: 68

Veteran Poster

Offline

1,080 posts
since Sep 2007

Permalink

Jan 23rd, 2008

Re: Authenticate Username and Password

Yes, thx to remind me on that really appreaciate it. I use the datasets cause i want to get all the value from the database and compare it with the login ID and password.

happy8899

Reputation Points: 10

Solved Threads: 0

Newbie Poster

Offline

24 posts
since Aug 2006

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.

Previous Thread in ASP.NET Forum Timeline: Help Needed

Next Thread in ASP.NET Forum Timeline: How to get UserId from cookies?

DaniWeb Message

Cancel Changes

User Name
Password