Inherits System.Web.UI.Page
Protected Sub btnLogin_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles btnLogin.Click
Select Case UserLogin(txtUsername.Text, txtPassword.Text)
Case 1
Session.Abandon()
Login()
Case 2
litUserData.Text = "Bad Password"
Case 3
litUserData.Text = "Unknown User"
End Select
End Sub
Public Sub Login()
Dim objTicket As FormsAuthenticationTicket = Nothing
Dim objCookie As HttpCookie = Nothing
Dim strReturnURL As String = Nothing
objTicket = New FormsAuthenticationTicket(1, txtUsername.Text, System.DateTime.Now, DateTime.Now.AddMinutes(60), False, Session.SessionID)
objCookie = New HttpCookie(".ASPXAUTH")
objCookie.Value = FormsAuthentication.Encrypt(objTicket)
Response.Cookies.Add(objCookie)
strReturnURL = Request.QueryString("ReturnURL")
If strReturnURL IsNot Nothing Then
Response.Redirect(strReturnURL)
Else
Response.Redirect("Default2.aspx", False)
End If
End Sub
Public Function UserLogin(ByVal strUsername As String, ByVal strPassword As String) As Integer
Dim iReturnValue As Integer = 0
Dim con1 As New SqlConnection(ConfigurationManager.AppSettings("ConnString"))
Dim cmd As New SqlCommand("spAuthAdminUser", con1)
cmd.CommandType = CommandType.StoredProcedure
cmd.Parameters.Add("@username", strUsername)
cmd.Parameters.Add("@password", strPassword)
cmd.Parameters.Add("@ReturnValue", SqlDbType.Int).Direction = ParameterDirection.ReturnValue
con1.Open()
cmd.ExecuteNonQuery()
iReturnValue = System.Convert.ToInt32(cmd.Parameters("@ReturnValue").Value.ToString())
con1.Close()
Return iReturnValue
End Function