Is it possible to allow users to login with Email, UserName, Phone or Password. but landing page should only select record by UserNme
LOGIN
protected void OnAuthenticate(object sender, AuthenticateEventArgs e)
{
string constr = ConfigurationManager.ConnectionStrings["con"].ConnectionString;
int UserID;
using (SqlConnection con = new SqlConnection(constr))
{
using (SqlCommand cmd = new SqlCommand("Validat_UserTable"))
{
using (SqlDataAdapter sda = new SqlDataAdapter())
{
cmd.CommandType = CommandType.StoredProcedure;
Session["UserName"] = ctlLogin.UserName;
cmd.Parameters.AddWithValue("@UserName", ctlLogin.UserName);
cmd.Parameters.AddWithValue("@Password", ctlLogin.Password);
cmd.Connection = con;
con.Open();
UserID = Convert.ToInt32(cmd.ExecuteScalar());
con.Close();
}
switch (UserID)
{
case -1:
ctlLogin.FailureText = "Username or password not correct.";
break;
case -2:
ctlLogin.FailureText = "Account has not been activated.";
break;
case -3:
ctlLogin.FailureText = "Your Password.";
break;
default:
Response.Redirect("~/Default2.aspx?Id=" + Session["UserName"].ToString());
break;
}
}
}
}
}
STOREDPROCEDURE
SET QUOTED_IDENTIFIER ON
GO
ALTER PROCEDURE [dbo].[GetUSERPROFILE1]
@UserName NVARCHAR,
@Id INT
AS
BEGIN
Select ID,Email,Name,Country,Interest, Convert(varchar (20), RegisterDate, 106) RegisterDate,Convert(varchar (20), LastLogin, 106) LastLogin ,ImageName FROM [Usertable] where Name=@UserName
END
LANDING PAGE CODE
protected void Page_Load(object sender, EventArgs e)
{
if (Session["UserName"] != null && Session["UserName"].ToString() == "micah")
{
string username = Session["UserName"].ToString();
// GetUserScraps(int.Parse(Request.QueryString["UserName"].ToString()));
}
else
{
}
}
public void username(string username)
{
string str = ConfigurationManager.ConnectionStrings["CON"].ConnectionString;
string getADPOST = "GetUSERPROFILE1";
using (SqlConnection con = new SqlConnection(str))
{
con.Open();
using (SqlCommand cmd = new SqlCommand(getADPOST, con))
{
cmd.CommandType = CommandType.StoredProcedure;
cmd.Parameters.AddWithValue("@UserName", Request.QueryString["UserName"].ToString());
SqlDataAdapter da = new SqlDataAdapter(cmd);
DataSet ds = new DataSet();
da.Fill(ds);
userprofile.DataSource = ds;
userprofile.DataBind();
{