- Select New from the File menu. You will see the New
File dialog box appear.
- Select Security from the Templates pane.
- Select the Login Page template.
- Type a file path in the Location box.
- Type Login.aspx in the Filename box.
- Select Visual Basic in the Language drop-down box.
- Click OK. The Login.aspx file will open in Design
view.
- Select the Code tab.
Note The ASP.NET Web Matrix has automatically placed code in the
LoginBtn_Click event to validate the UserName and UserPass
values:
Sub LoginBtn_Click(Sender As Object, E As EventArgs)
If Page.IsValid Then
If (UserName.Text = "jdoe@somewhere.com") And (UserPass.Text = "password") Then
FormsAuthentication.RedirectFromLoginPage(UserName.Text, true)
Else
Msg.Text = "Invalid Credentials: Please try again"
End If
End If
End Sub
- From the Code Builders tab in the Toolbox, drag a
SELECT Data Method Code Builder onto the ASP.NET page.
- You will see the Connect to Database dialog box appear.
- Type localhost in the Server box.
- Click the Database drop-down. ASP.NET Web Matrix will connect
to the data source and populate the Database drop-down with
database names. Select the Orders database and click OK.
- You will see step one of the Code Builder Wizard appear; it is
called the Construct SELECT Query dialog box.
- Select Users in the Tables list view.
- Select the check box next to the * item in the Columns
list view.
- Click WHERE.
- You will see the WHERE Query Builder dialog box appear.
- Select the Users table in the Table drop-down in the
Left Operand pane.
- Select UserName in the Column list view.
Note This option sets the Left Operand portion of the
WHERE clause.
- Select the Filter radio button and type @UserName in the
filter box (default).
Note This option sets the the Right Operand portion of
the WHERE clause. You will pass this value as a parameter to the WHERE
clause later in this walkthrough.
- Click OK.
- You will return to the Construct SELECT Query step of the
Code Builder Wizard.
- Click AND Clause.
- You will see the Query Builder dialog box appear.
- Select the Users table in the Table drop-down in the
Left Operand pane.
- Select UserPassword in the Column list view.
Note This option sets the Left Operand portion of the
WHERE clause.
- Select the Filter radio button and type @UserPassword in
the filter box (default).
Note This option sets the the Right Operand portion of
the WHERE clause. You will pass this value as a parameter to the WHERE
clause later in this walkthrough.
- Click OK.
- You will return to the Construct SELECT Query step of the
Code Builder Wizard.
- Click Next.
- You will see step two of the Code Builder Wizard appear;
Query Preview.
- Click Test Query.
- Type bsmith into the UserName = box.
- Type bsmith into the UserPassword = box.
- Click OK.
- You will see the Users row corresponding to the specified
UserName and UserPassword appear in the Query Preview
dialog box results grid.
- Click Next.
- You will see step three of the Code Builder Wizard appear; it
is called the Enter A Caption dialog box. Type GetUser into
the method name box.
- Select the DataSet radio button.
- Click Finish.
- The Wizard will close and ASP.NET Web Matrix will place a
function called GetUser in Code view. The function accepts a
userName and userPassword as input parameters and returns a
DataSet as an output parameter. The DataSet is populated
with user detail data for the specified userName and
userPassword:
Function GetUser(ByVal userName As String, ByVal userPassword As String) _
As System.Data.DataSet
Dim connectionString As String = _
"server='localhost'; trusted_connection=true; Database='Orders'"
Dim sqlConnection As System.Data.SqlClient.SqlConnection = _
New System.Data.SqlClient.SqlConnection(connectionString)
Dim queryString As String = _
"SELECT [Users].* " & _
"FROM [Users] " & _
"WHERE (([Users].[UserName] = @UserName) AND " & _
"([Users].[UserPassword] = @UserPassword))"
Dim sqlCommand As System.Data.SqlClient.SqlCommand = _
New System.Data.SqlClient.SqlCommand(queryString, sqlConnection)
sqlCommand.Parameters.Add("@UserName", System.Data.SqlDbType.VarChar).Value = _
userName
sqlCommand.Parameters.Add("@UserPassword", System.Data.SqlDbType.VarChar).Value = _
userPassword
Dim dataAdapter As System.Data.SqlClient.SqlDataAdapter = _
New System.Data.SqlClient.SqlDataAdapter(sqlCommand)
Dim dataSet As System.Data.DataSet = New System.Data.DataSet
dataAdapter.Fill(dataSet)
Return dataSet
End Function
- Update the Button Click event so that it validates user input
against the results of calling the GetUser function:
Sub LoginBtn_Click(Sender As Object, E As EventArgs)
If Page.IsValid Then
Dim userDS As New System.Data.DataSet
userDS = GetUser(UserName.Text, UserPass.Text)
If userDS.Tables(0).Rows.Count = 1 Then
FormsAuthentication.RedirectFromLoginPage(UserName.Text, true)
Else
Msg.Text = "Invalid Credentials: Please try again"
End If
End If
End Sub
- Save and run the Login page.
- Your Login page will automatically appear in a new instance of your
Web browser.
- Type bsmith into the Username and Password boxes
and click Login.
- By default, the Login page will redirect the user to a page
named Default.aspx on a successful login.
Note The Login Page will display an error message if you
supply credentials that do not exist in the Users table.
- Close the Web browser instance.
