<%-- login.aspx
<%@ Page Language="C#" %>
<%@ Import Namespace="System.Web.Security " %>
<%@ Import Namespace="System.Data.OleDb" %>
void Login_Click(Object Src, EventArgs E)
{
if (Page.IsValid)
{
String strConn ="PROVIDER=Microsoft.Jet.OLEDB.4.0;DATA SOURCE=" + Server.MapPath("DBAuth.mdb") + ";";
OleDbConnection Conn = new OleDbConnection(strConn) ;
Conn.Open();
String strSQL = "SELECT Pwd FROM Tbl_MA_Users WHERE Email = '" + txtEmail.Text + "'";
OleDbCommand Cmd = new OleDbCommand(strSQL,Conn);
//Create a datareader, connection object
OleDbDataReader Dr = Cmd.ExecuteReader(System.Data.CommandBehavior.CloseConnection);
//Get the first row and check the password.
if (Dr.Read())
{
if (Dr["Pwd"].ToString() == txtPwd.Text)
FormsAuthentication.RedirectFromLoginPage(txtEmail.Text, false);
else
lblLoginMsg.Text = "Invalid password.";
}
else
lblLoginMsg.Text = "Login name not found.";
Dr.Close();
}
}
Using Form based Authentication
Users Name:
*
Display="Dynamic"
ErrorMessage="Login name can't be empty."
runat=server/>
*
Display="Dynamic"
ErrorMessage="Password can't be left empty."
runat=server/>
ForeColor="Red"
Font-Name="Verdana";
Font-Size="10"
runat=server />
Text="Login"
OnClick="Login_Click"
runat=Server />
--%>
<%-- default.aspx
<%@ Import Namespace="System.Web.Security " %>
void Page_Load(Object S, EventArgs E)
{
lblUser.Text = User.Identity.Name;
lblType.Text = User.Identity.AuthenticationType;
}
void Logout_Click(Object S, EventArgs E)
{
FormsAuthentication.SignOut();
Server.Transfer("login.aspx");
}
Forms Authentication With a Database
Current Users Name
Current Authentication Type
--%>
<%-- web.config
--%>
AuthenticationFormsDB.zip( 10 k)