0

hi,
i need to get the column values from the table login.it contais two columns ,userid and password. i want to check the userid and password values when the user logged in.so i have to compare the entered textbox value with the saved value. i am using the code is shown below.

rdr=cmd.executereader();
while(rdr.read())
{
if(txtbox1.text==rdr[0])
if(txtbox2.text==rdr[0])
msg(" successfully loggedin");
}

i am using the asp.net(C#.net )with sql server..
so can u tell me the solution for that.

3
Contributors
3
Replies
4
Views
8 Years
Discussion Span
Last Post by sknake
1

Why dont you include the parameters in the select statement something like

string st = "select user, pass from loggin where user = '"+txtbox1.text+"' and pass = '"+txtbox2.text+"'";
//Then pass that select to the command object
rdr=cmd.executereader();
if(rdr.HasRows)
{
   msg(" successfully loggedin");
}

Take care.

0

hi,
thank you very much. ur code is working.. but i need to compare the userid and password with the saved user id and password in the database. when the both are matched then we will give the msg box as" successfully loggedin" . so can u send the code for it.

0

You do not want to bring the password back in a select statement for security reasons. Do what jbisono suggested and send the data to the database. If you try to select the user "Where username = @username and password = @password" then it will return 0 rows since the password did not match, thus the login failed. If you have a row then the login was OK.

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.