protected void btnlogin_Click(object sender, EventArgs e) { try { UserAuthentication auth = new UserAuthentication(); string username = name.Value.ToString().Trim().ToLower(); string password = pass.Value.ToString().Trim(); if (Tools.checkForSQLInjection(username) == true || Tools.checkForSQLInjection(password) == true) { throw new Exception("Username or password is incorrect !"); } DataRow dt = auth.VERIFICATION_USER(username, password); if (dt == null) { throw new Exception("Username or password is incorrect !"); } Session["username"] = dt["user_username"].ToString(); Session["fullname"] = dt["user_fullname"].ToString(); Session["role"] = dt["user_role"].ToString(); Session["id_number"] = dt["user_id_number"].ToString(); Session["id"] = dt["id"].ToString(); FormsAuthentication.RedirectFromLoginPage(dt["user_username"].ToString(), true); auth.LOG(int.Parse(dt["id"].ToString())); Response.Redirect("~/cpanel/PC/Default.aspx"); } catch (Exception xxx) { string script = "Swal.fire({ type: 'error', title: 'Oops...', text: '" + xxx.Message.ToString() + "' });"; Page.ClientScript.RegisterStartupScript(this.GetType(), "CallMyFunction", script, true); } /* * string us, p; * us = name.Value.ToString().Replace("$", "").Replace("'", "").Replace("'", "").Replace("=", "").Replace("\"", "").Replace(" ", "").Replace(" ", "").Replace("\\", "").Replace("/", "").Replace(";", ""); * p = pass.Value.ToString().Replace("$", "").Replace("'", "").Replace("'", "").Replace("=", "").Replace("\"", "").Replace(" ", "").Replace(" ", "").Replace("\\", "").Replace("/", "").Replace(";", ""); * // AAAK01.Text = us+ " "+p; * bool XXX = CCXC.CheckIDusernamepass(us, p); * if (XXX) * { * DataSet KKK = CCXC.GetDataIDusernamepass(us, p); * Session["userpublish"] = KKK.Tables[0].Rows[0]["TBunX51"].ToString(); * Session["userIDnumber"] = KKK.Tables[0].Rows[0]["TBidx51"].ToString(); * Session["userLevel"] = KKK.Tables[0].Rows[0]["TBkinX51"].ToString(); * Session["userFullname"] = KKK.Tables[0].Rows[0]["TBnaX51"].ToString(); * Session["userImage"] = KKK.Tables[0].Rows[0]["TBimageX51"].ToString(); * Application[KKK.Tables[0].Rows[0]["TBidx51"].ToString()] = KKK.Tables[0].Rows[0]["TBidx51"].ToString(); * FormsAuthentication.RedirectFromLoginPage(KKK.Tables[0].Rows[0]["TBunX51"].ToString(), true); * CCXC.LoginInfoX6(Session["userpublish"].ToString()); * * * Response.Redirect("~/cpanel/PC/Default.aspx"); * * * } * else * { * Label1.Text = "incorrect username or password. please try again"; * Label1.ForeColor = Color.Red; * Label1.Font.Size = 12; * //Response.Redirect("~/ErrorXX/try0XX21/index.html"); * } */ }