0

Hello All,

I have created simple login form through VS 2008 using C#. There are 5 different aspx pages in my web application.

1)Default.aspx: It contains only a hyperlink to direct the user to login.aspx page.
2)Login.aspx: This page has texbox for Username and Password, sign in button, textbox for displaying error and hyperlink (Create an Account) if the user does not created an account yet.

Here is Login.aspx code:

<%@ Page Language="C#" AutoEventWireup="true" CodeBehind="login.aspx.cs" Inherits="WebApp01.login" %>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
    <title></title>
</head>
<body>
    <form id="form1" runat="server">
    <div>
        <h3>
            <font face="Verdana">Logon Page</font>
        </h3>
        <table>
            <tr>
                <td>
                    Username:
                </td>
                <td>
                    <input id="txtUserName" type="text" runat="server" />
                </td>
                <td>
                    <asp:RequiredFieldValidator ControlToValidate="txtUserName" Display="Static" ErrorMessage="*"
                        runat="server" ID="vUserName" />
                </td>
            </tr>
            <tr>
                <td>
                    Password:
                </td>
                <td>
                    <input id="txtUserPass" type="password" runat="server" />
                </td>
                <td>
                    <asp:RequiredFieldValidator ControlToValidate="txtUserPass" Display="Static" ErrorMessage="*"
                        runat="server" ID="vUserPass" />
                </td>
            </tr>
            <tr>
                <td>
                    Persistent Cookie:
                </td>
                <td>
                    <asp:CheckBox ID="chkPersistCookie" runat="server" AutoPostBack="false" />
                </td>
                <td>
                </td>
            </tr>
        </table>
        &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
        <asp:Button ID="btnSignIn" runat="server" OnClick="btnSignIn_Click" Text="Sign In1" />
        <br />
        <br />
        <asp:TextBox ID="txtResult" runat="server" Width="268px"></asp:TextBox>
        <br />
        <br />
        Do not have an Account?<h3>
            <asp:HyperLink ID="HyperLink1" runat="server" NavigateUrl="~/signupwizard.aspx">Create an Account</asp:HyperLink>
        </h3>
        <p>
        </p>
        <asp:Label ID="lblMsg" ForeColor="red" Font-Name="Verdana" Font-Size="10" runat="server" />
    </div>
    </form>
</body>
</html>

3)SignUpWizard.aspx: When the users click on hyperlink (Create an Account) on login.aspx, they are directed to SignUpWizard.aspx. This page has simple form and collect the information from user and save into database. I have successfully done the insertion of user information into my databse using C#. If the insertion is successful, application will direct the user to Confirm.aspx otherwise it will direct user to Problem.aspx. I have not included aspx file for this page but here is code behind file.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Configuration;


namespace WebApp01
{
    public partial class signupwizard : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {
            txtFirstName.Focus();
        }

        protected void btnSubmit_Click(object sender, EventArgs e)
        {
            SqlDataSource tblUserInfo1DateSource = new SqlDataSource();
            tblUserInfo1DateSource.ConnectionString = ConfigurationManager.ConnectionStrings["MyDBConnectionString"].ToString();

            tblUserInfo1DateSource.InsertCommandType = SqlDataSourceCommandType.Text;
            tblUserInfo1DateSource.InsertCommand = "INSERT tblUSerInfo1 (uiFirstName, uiLastName, uiUsername, uiPassword, uiCountry, uiDateOfBirth) VALUES (@uiFirstName, @uiLastName, @uiUSername, @uiPassword, @uiCountry, @uiDateOfBirth)";

            tblUserInfo1DateSource.InsertParameters.Add("uiFirstName", txtFirstName.Text);
            tblUserInfo1DateSource.InsertParameters.Add("uiLastName", txtLastName.Text);
            tblUserInfo1DateSource.InsertParameters.Add("uiUsername", txtUsername.Text);
            tblUserInfo1DateSource.InsertParameters.Add("uiPassword", txtChoosePassword.Text);
            tblUserInfo1DateSource.InsertParameters.Add("uiCountry", ddlCountry.Text);
            tblUserInfo1DateSource.InsertParameters.Add("uiDateOfBirth", txtDOB.Text);

            int rowsaffected = 0;

            try
            {
                rowsaffected = tblUserInfo1DateSource.Insert();
            }
            catch
            {
                Response.Redirect("problem.aspx");
            }
            finally
            {
                tblUserInfo1DateSource = null;
            }

            if (rowsaffected != 1)
            {
                Response.Redirect("problem.aspx");
            }
            else
            {
                Response.Redirect("confirm.aspx");
            }
        }
    }
}

Now, I want to do following with my application.

If the user already has an account, he can put his username and password and click on the sign in button. If the username is existed in databse, application should compare the user input with database and if both are matched then the application should redirect the user to "welcome.aspx". If username does not exist it should show that Username does not exist. Does anyone have any idea?

4
Contributors
3
Replies
5
Views
7 Years
Discussion Span
Last Post by ashishkj1989
0

Create a functions that will check if username exists (SELECT * FROM table WHERE USERNAME = '" & username & "'"). If reader.Read then return True else return False. It's same code for checking password (if password = reader("PASSWORD"))..

0
protected void Button1_Click(object sender, EventArgs e)
    {
        string connectString = "Data Source=VOSTRO\\SQLEXPRESS;Initial Catalog=master;Integrated Security=True";
        SqlConnection con = new SqlConnection(connectString);
        con.Open();
        string lecd = (string)(Session["v"]);
        //selecting data from database   
        string sql = "select * from employees WHERE e_code=" + lecd;
        SqlCommand cmd = new SqlCommand(sql, con);
        SqlDataReader reader = cmd.ExecuteReader();
        while (reader.Read())
        {
            string password = reader["password"].ToString();



            if (TextBox1.Text == password)
            {

                if (TextBox2.Text == TextBox3.Text)
                {

                    SqlConnection con1 = new SqlConnection(connectString);
                    con1.Open();
                    string sql1 = "UPDATE employees SET password =@password WHERE e_code=(@e_code)";
                    SqlCommand cmd1 = new SqlCommand(sql1, con1);
                    cmd1.Parameters.Add("e_code", lecd);
                    cmd1.Parameters.Add("password", TextBox3.Text);
                    cmd1.ExecuteNonQuery();
                    con1.Close();
                    Label6.Visible = true;
                    Label6.Text = "done";

                }
                else
                {
                    Label6.Visible = true;
                    Label6.Text = "password mismatch";


                }

            }
            else
            {
                Label6.Visible = true;
                Label6.Text = "Enter correct password";
            }
        }
        con.Close();
      

    }

Edited by Ezzaral: Added code tags. Please use them to format any code that you post.

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.