public ActionResult Index([Bind(Include = "StaffID, StaffPassword")] Staff staff) { var usertype = db.Staffs.Where(a => a.StaffID == staff.StaffID && a.StaffPassword == staff.StaffPassword && a.deleted == "0").FirstOrDefault(); using (var context = new dbClinicManagementEntities()) { context.Database.Connection.Open(); var query = from q in context.Staffs where q.StaffID == staff.StaffID && q.StaffPassword == staff.StaffPassword && q.deleted == "0" select q; if (query.Any()) { try { Session["usertype"] = usertype.UserTypeID; Session["staffid"] = usertype.StaffID; Session["fname"] = usertype.StaffFirst; Session["lname"] = usertype.StaffLast; Session["staffname"] = usertype.StaffFirst + ' ' + usertype.StaffLast + " (" + usertype.UserType.TypeDesc + ')'; } catch (Exception e) { } System.Diagnostics.Debug.WriteLine("Login Success"); if (Convert.ToInt32(usertype.UserTypeID.ToString()) == 2) { return(RedirectToAction("Index", "MedChecks")); } if (Convert.ToInt32(usertype.UserTypeID.ToString()) == 3) { return(RedirectToAction("Index", "Patients")); } else { return(RedirectToAction("Index", "Staffs")); } } else { ViewBag.ErrorMessage = "Invalid Credentials"; } } return(View()); }