C#

using(var con = new SqlConnection(@"Data Source=SAJJAD-PC;Initial Catalog=hotel;Integrated Security=True;") {
   con.Open();
   using(var cmd = con.CreateCommand()) {
      cmd.CommandText="SELECT COUNT(*) FROM login WHERE username=@username AND password=@password";
      // Adjust the size of the column according to the database field size. I just use 50 as an example
      cmd.Parameters.Add("@username", SqlDbType.Varchar, 50).Value = usernametxtbox.Text; 
      cmd.Parameters.Add("@password", SqlDbType.Varchar, 50).Value = passwordtxtbox.Text;
      var result = (int)cmd.ExecuteScalar();
      if(result==1) {
         // Username and Password match found
      } else {
         // No match found
      }
   }
}

HUKUMAT RAY KUMAWAT wrote:

usernametxtbox.Text.ToString()

OriginalGriff wrote:

It went to moderation.

OriginalGriff wrote:

It had a hash value that matched an existing message in the CP database.

Bastard Programmer from Hell
If you can't read my code, try converting it here[^]

Eddy Vluggen wrote:

Why not state that then

Eddy Vluggen wrote:

In that case, one does a more detailed compare.

OriginalGriff wrote:

any more than you should say "incorrect password" instead of "the username and
password combination was not found".

Bastard Programmer from Hell
If you can't read my code, try converting it here[^]

Eddy Vluggen wrote:

Especially after Windows shows you pictures with names of each account you can use

Richard MacCutchan wrote:

It's only when you get to real multi-user systems (Unix, Linux, MVS etc.) that this really becomes an issue.

OriginalGriff wrote:

And anything online.

\d+(\.\d+)?