C# SQL Database Windows Form Login System

Question

Im working on a SQL database project in C#. I'm looking to create a login form which will be presented when someone starts the application.

The connection is made to the database, however they must enter a correct username and password into the first form before they can proceed to see the rest.

I have created 2 text boxes, and a button txtusername and txtpassword and a button login.

Here is my SQL command:

SqlCommand command = new SqlCommand("SELECT * FROM tblUsers WHERE Username ='" + txtUsername + "' AND Password = '" + txtPassword + "'", Program.cs);

I'm looking for a way to show in a label if the sql command yields a result meaning the username and password is stored in the user table then it returns true or something. If there is a more efficient or effective way to this also let me know :).

Hi, i managed to create a login system using this to guide me. youtube.com/watch?v=L7Bc3GL1N8E&feature=related tho i tweaked it and used textbox instead of filling a combobox. — Kay
– Kay, Commented Jul 25, 2012 at 12:14

Pintu Paul · Accepted Answer · 2012-07-26 11:05:53Z

0

This code is a Vulnerability in your project See this for details

answered Jul 26, 2012 at 11:05

Pintu Paul

3993 silver badges18 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Sergei Rogovtcev · Accepted Answer · 2012-07-25 10:46:50Z

0

You should never create command texts by concatenating strings. Use SqlParameter. That is to put first things first.

And it seems to me that you have no (or very little) understanding how data access works in .net. So I'd recommend you to read some books on that topic, for example, Microsoft's "Accessing Data with .NET Framework 4".

answered Jul 25, 2012 at 10:46

Sergei Rogovtcev

5,8302 gold badges24 silver badges35 bronze badges

1 Comment

Alexander R Over a year ago

Not an answer per se, but +1 for a very valid point. This question highlights a myriad of problems in understanding exactly how to work with a database in C#. Until the OP's done some reading and research, no answer will give much help...

VLAZ · Accepted Answer · 2025-09-24 06:59:32Z

0

Code for login page

tn_click() //button click event 
{ 
    Sqlconnection con=new
    sqlconnection(Strcon); 

    String sqlquery="select usrname,password from loginpage where username='textname.text' and password='textpassword.text'"; 

    Sqlcommand sqlcom=new Sqlcommand(Sqlquery,con); 
    con.open(); 

    Sqldatareader dr;
    dr=sqlcomm.executereader(commandbehavior close connection);
    
    if(dr.read()) 
    {  
        session["un"]=dr["username"].Tostring();
        session["pwd"]=dr["userpassword"].Tostring();
    
        if(dr["userpassword"].Tostring()!=null); 
            respone.redirect("userdetail.aspx"); 
    } 
    else 
    { 
        respone.redirect("login.aspx"); 
    } 
    else 
    {
        lblmsg.text="invalid user"; 
    }
}

edited Sep 24 at 6:59

VLAZ

29.6k9 gold badges65 silver badges88 bronze badges

answered Feb 21, 2013 at 10:52

vikash sharma

1

Collectives™ on Stack Overflow

C# SQL Database Windows Form Login System

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related