Private Sub cmdLogin_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles cmdLogin.Click


        If Page.IsValid Then


            Try


                'Dim Conn As New SqlConnection(ConfigurationSettings.AppSettings("connStr"))


                'Dim cmd As New SqlCommand("CheckLogin", Conn)


                'cmd.CommandType = CommandType.StoredProcedure


                Dim Param(1) As SqlParameter


                Dim strCryptPass As String


                Dim intResult As Integer


                Param(0) = New SqlParameter("@username", SqlDbType.VarChar)


                Param(0).Value = Replace(txtUsername.Text, "'", "''")


                'cmd.Parameters.Add(Param)


                strCryptPass = FormsAuthentication.HashPasswordForStoringInConfigFile(txtPassword.Text.ToLower, "sha1")


                Param(1) = New SqlParameter("@password", SqlDbType.VarChar)


                Param(1).Value = strCryptPass


                'cmd.Parameters.Add(Param)


                'Conn.Open()


                'cmd.ExecuteNonQuery()


                'intResult = cmd.Parameters("@RETURN_VALUE").Value


                'Conn.Close()


                intResult = Convert.ToInt32(SqlHelper.ExecuteScalar(ConfigurationSettings.AppSettings("connStr"), CommandType.StoredProcedure, "CheckLogin", Param))





                Select Case intResult


                    Case Is > 0


                        CreateTicket(txtUsername.Text, intResult)


                    Case -1


                        lblErr.Text = "Username could not be found"


                    Case -2


                        lblErr.Text = "Passwords do not match"


                End Select


            Catch ex As Exception


                lblErr.Text = ex.Message


            End Try


        End If


    End Sub

public int CheckLogin(string userName, string passPhrase) 


{


  object o = SqlHelper.ExecuteScalar(_connString, "CheckLogin", userName, passPhrase);


  return o == null ? -1 : (int)o;


}

ALTER PROCEDURE dbo.CheckLogin


(


  @UserName nvarchar(50),


  @Password nvarchar(50)


)


AS


  SELECT  UserId


  FROM         Users


  WHERE     (Password = @Password) AND (Activated = 1) AND (NickName = @UserName)


RETURN 

CREATE PROCEDURE [dbo].[CheckLogin] 


@username varchar(50),


@password varchar(50)


AS


declare @id int


declare @actualpassword varchar(50)


select @id = accesslevel,


@actualpassword = password


from users 


where username = @username





If @id is not null


   if @password = @actualpassword


	return @id


   else


	return -2


else


return -1


GO