creating a login form

Question

Hi I have created a window application. I have to provide security to it. I have to provide a login form with username and password. The username and password are present in the database. When i click the login button it should compare the username and password entered in the form with that in database and give access to the Window application that i first created. How to do it. Please help Nitin Raj Bidkikar

Suthish Nair · Answer

Kamil post your question as a new thread.

Kamil Zahid · Answer

Hi Guys This is the code i have used and it always prompts me with Invalid username or password even though my database holds the correct username and password. Please help??? private void button1_Click(object sender EventArgs e) { string username = textBox1.Text; string password = textBox2.Text; if (ValidateUserNamePassword(username password)) { MessageBox.Show(Login successful); } else { MessageBox.Show(Invalid user name or password); return; } } public bool ValidateUserNamePassword(string username string password) { MySqlConnection cn = new MySqlConnection(@SERVER=localhost; + DATABASE=clientmanagement; + UID=root; + PASSWORD=qwerty;); { MySqlCommand cmd = new MySqlCommand(); cmd.Connection = cn; cmd.CommandType = CommandType.StoredProcedure; cmd.CommandText = tsp_GetUserNameAndPassword; MySqlParameterCollection sqlParams = cmd.Parameters; sqlParams.AddWithValue(@UserName username); sqlParams.AddWithValue(@Password password); cn.Open(); MySqlDataReader dr = cmd.ExecuteReader(CommandBehavior.SingleRow); if (dr.Read()) { // this will return true if a row matching the username and password is found. // this means that the user's input is valid return true; } else { return false; } dr.Close(); cn.Close(); } } private void button2_Click(object sender EventArgs e) { Application.Exit(); } } }

nitin bidkikar · Answer

thanks a lot

Ryan Alford · Answer

very simple. in the ok or logon button's Click_Event on the Login page put this code in: string username = txtUserName.Text; string password = txtPassword.Text; if ( ValidateUserNamePassword(username password) ) { // move to next form or do whatever you need to do after a successfull login } else { MessageBox.Show(Invalid user name or password Invalid Login); return; } create a method called ValidateUserNamePassword and have it accept two string parameters and return a boolean value then run your query/stored procedure. I will do a stored procedure called tsp_GetUserNameAndPassword. public bool ValidateUserNamePassword(string _username string _password) { string connectionString = Data Source=[servername];Initial Catalog=[databaseName];User ID=[Admin Login];Password=[Admin Password];; using (SqlConnection cn = new SqlConnection(connectionString); { SqlCommand cmd = new SqlCommand(); cmd.Connection = cn; cmd.CommandType = CommandType.StoredProcedure; cmd.CommandText = tsp_GetUserNameAndPassword; SqlParameterCollection sqlParams = cmd.Parameters; sqlParams.AddWithValue(@UserName _username); sqlParams.AddWithValue(@Password _password); cn.Open(); SqlDataReader dr = cmd.ExecuteReader(CommandBehavior.SingleRow); if (dr.Read()) { // this will return true if a row matching the username and password is found. // this means that the user's input is valid return true; } else { return false; } dr.close(); cn.close(); } } then your Stored Procedure will look something like this: set ANSI_NULLS ON set QUOTED_IDENTIFIER ON GO ALTER PROCEDURE [dbo].[tsp_GetUserNameAndPassword] @UserName varchar(15) -- or whatever the datatype is @Password varchar(25) -- or whatever the datatype is AS SELECT UserName  Password FROM [TableName] WHERE UserName = @UserName Password = @Password that should work for you.