Comments by Bajpangosh (Top 17 by date)

thakq u r really awesome. it's just a college project. am not trying to host this code in web. and really thankful for mention the sql injection attack :)

here is my login code where did i put "UPDATE MyTable SET LastLoginDate=GETDATE() WHERE UserId=... " code in


protected void login_btn_Click(object sender, EventArgs e)
{
int cnt = 0;

// SqlDataAdapter ad1 = new SqlDataAdapter(@"select Id from UserReg WHERE Name='" + TextBox1.Text + "' AND Password='" + TextBox2.Text + "'", con);
// DataTable dt = new DataTable();



SqlCommand cmd;
SqlDataReader dr;
cmd = new SqlCommand("select Id from UserReg WHERE Name='" + username.Text + "' AND Password='" + password.Text + "'");

con.Open();
cmd.Connection = con;
cmd.ExecuteNonQuery();
dr = cmd.ExecuteReader();
while (dr.Read())
{

// ad1.Fill(dt);
cnt = Convert.ToInt32(dr["Id"].ToString());
}

if (cnt > 0)
{
Response.Redirect("profile.aspx?id=" + cnt); //Response.Redirect("veinpage.aspx?id=" + cnt);
}

else
{
loginchk.Text = "Invalid username or password";
this.loginchk.ForeColor = Color.Red;
}

}
}

thx but it's shows a blank page

thx for helping me bro. maybe it's works but am a newbie in visual studio :(

when i put this code on cs

it's shows an compile error

//Error 19 Use of unassigned local variable 'cmd'

i didn't get you. after successful login how to redirect the logged user profile any ideas>?

run time it's shows an error :(

An exception of type 'System.NullReferenceException' occurred in App_Web_bly0ny4p.dll but was not handled in user code


it's pop-out from

cmd = new SqlCommand("select * from shops where Id=" + Request.QueryString["Id"].ToString());

yes it's working bro but it's does't show the logged user profile :(

yes i did but after login it's does not redirect to the proper profile :(

but help me to display these fetched datas on text box.

just drag the textbox and change the id. is it works or teach me the right way :(

here is my cs code but how to display these fetched datas on aspx page..?

SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["VeinConnectionString"].ConnectionString);
protected void Page_Load(object sender, EventArgs e)

{

if (!IsPostBack)
{
bindata();
}

}


public void bindata()
{
SqlCommand cmd;
SqlDataReader dr;
cmd = new SqlCommand("select * from shops where Id=" + Request.QueryString["Id"].ToString());
cmd.Connection = con;
cmd.ExecuteNonQuery();
dr = cmd.ExecuteReader();
while (dr.Read())
{
Shops.Text = dr["Shops"].ToString();
Reviews.Text = dr["Reviews"].ToString();

Website.Text = dr["Website"].ToString();
Fbpage.Text = dr["Fbpage"].ToString();
Phone.Text = dr["Phone"].ToString();
Email.Text = dr["Email"].ToString();
Place.Text = dr["Place"].ToString();
Latitude.Text = dr["Latitude"].ToString();

Longitude.Text = dr["Longitude"].ToString();

}





}

thx Snehasish Nandy but am a newbie in c# i dont know to code the asp.cs page could you help me..?