ASP.NET

http://mtiicorys008/PropertyProd/Add_Property.aspx

protected void btlogin_Click(object sender, EventArgs e)
    {
        String strusername = txtUsername.Text;

        String strPassword = txtPassword.Text;

        
        BLL.BLL obj = new BLL.BLL();

    
       int bl = 0;

        try
        {

            bl = obj.Check_Login(strusername, strPassword);

            if (bl == 1)
            {
                Session["USERNAME"] = strusername;

                Response.Redirect("Welcome.aspx", false);
            }

            else
            {

                Response.Write("<script language='javascript'>alert('Invalid Login');</script>");

            }
        }

        catch (Exception)
        {

            Response.Write("<script> alert('ex.Message');</script>");
        }
    }

public int Check_Login(String username, String password)
        {

            int ans = 0;

            DAL.DAL obj = new DAL.DAL();

            try
            {
                ans = obj.Check_Login(username, password);
            }
            catch (Exception)
            {
                throw;
            }
            return ans;
        }

public int Check_Login(String Username, String Password)
        {

            con = new SqlConnection(strconlogin);

            cmdselect = new SqlCommand();


            cmdselect.CommandTimeout = 0;


            cmdselect.CommandType = CommandType.StoredProcedure;


            cmdselect.CommandText = "dbo.prcLoginv";


            cmdselect.Parameters.Add("@User_name", SqlDbType.VarChar, 50, "UserName").Value = Username;


            cmdselect.Parameters.Add("@U_Password", SqlDbType.VarChar, 50, "UPassword").Value = Password;


            cmdselect.Parameters.Add("@Results", SqlDbType.Int);


            cmdselect.Parameters["@Results"].Direction = ParameterDirection.Output;


            cmdselect.Connection = con;


            int res = 0;

            try
            {
                con.Open();

                cmdselect.ExecuteNonQuery();

                res = Convert.ToInt32(cmdselect.Parameters["@Results"].Value);

                con.Close();
            }
            catch (SqlException)
            {
                throw;

            }

            return res;
        }

Response.Write("<script> window.history.forward(1);</script>");

        if (Session["USERNAME"] == "")
        {

            Response.Redirect("login.aspx");
        }

shanthi jothi wrote:

how many data store in one Sql database

Samiullah wrote:

i dont want to place my BAL and DAL in the App_Code folder

Samiullah wrote:

Its urgent please let me know.