public ActionResult LogIn(EMS_User u) { // this action is for handle post. if (ModelState.IsValid) // this is check validity. { using (EMS_PSS_DBContext dt = new EMS_PSS_DBContext()) { // check database to see if this user in database. var v = dt.EMS_Users.Where(s => s.User_Name.Equals(u.User_Name) && s.PassWord.Equals(u.PassWord)).FirstOrDefault(); // if user is exist. if (v != null) { // set info to session. Session["LogedUserID"] = v.User_ID.ToString(); Session["LogedUserName"] = v.User_Name.ToString(); Session["LogedSecurityLevel"] = v.SecurityLevel_ID.ToString(); return(RedirectToAction("AfterLogin")); } } } // return view. return(View(u)); }