i am verifying user, if username exist in DB page will redirect to home page else get error message. i am providing my code along wid SP. let me knw wat i am doing wrong.
.cs code: public void loginVerified(string strName,string strPassword)
{
con.Open();
try {
SqlCommand cmdInsert = new SqlCommand("sp_login", con);
cmdInsert.CommandType = CommandType.StoredProcedure;
cmdInsert.Parameters.AddWithValue("@username", strName);
cmdInsert.Parameters.AddWithValue("@password", strPassword);
SqlParameter sqlParam = new SqlParameter("@validUser", SqlDbType.NVarChar);
sqlParam.Direction = ParameterDirection.Output;
cmdInsert.Parameters.Add(sqlParam);
sqlParam.Size = 6;
cmdInsert.ExecuteNonQuery();
string uName = cmdInsert.Parameters["@validUser"].Value.ToString();
if (uName == strName)
HttpContext.Current.Response.Redirect("Home.aspx");
else
HttpContext.Current.Response.Write("invalid user");
}
catch (Exception ee)
HttpContext.Current.Response.Write("error : " + ee.Message.ToString());
finally
con.Close();
}
SP: ALTER PROCEDURE [dbo].[sp_login]( @username nvarchar (50),@password nvarchar (50))
AS
BEGIN
DECLARE
@validUser nvarchar(50)
SET @validUser= (SELECT username
from tb_registration
where username=@username AND password=@password);
select @validUser