Kindly help me with change password - code attached.

[yasinirshad]

Hi, Please see my below code to change password. Here i need to check for old password from database and need to update new password. But when i try to submit by giving wrong old password ,its redirecting me to PasswordSet.asp x whereas it shd give message Invalid Old Password. It shd redirect me only when user gives correct old password and enters new password. please help.

Private Sub btn_submit_ServerClick(ByVal sender As System.Object, ByVal e As System.Web.UI.ImageClickEventArgs) Handles btn_submit.ServerClick
 
        Dim myConnection, myCommand
        Dim intUserCount As Integer
        Dim strSQL As String
 
        strSQL = "UPDATE EPSusers SET Password='" & Replace(txt_newpassword.Text, "'", "''") & "' " & "WHERE UserName='" & Replace(txt_uid.Text, "'", "''") & "' " _
         & "AND Password='" & Replace(txt_oldpassword.Text, "'", "''") & "';"
 
        myConnection = New SqlConnection("Server=(local);Database=testdb;uid=sa;password=courage")
 
        myCommand = New SqlCommand(strSQL, myConnection)
 
        myConnection.Open()
        intUserCount = myCommand.ExecuteScalar()
        myConnection.Close()
 
        If txt_oldpassword.Text.Trim = "" Then
            lblStatus.Text = "Invalid Old Password!"
            'Exit Sub
            FormsAuthentication.SetAuthCookie(txt_oldpassword.Text, True)
            lblInvalid.Text = "Your User Name and Password cannot be located, try again.!!!."
            'Session("UName") = txt_uid.Text
            'Response.Redirect("PasswordSet.aspx")
        Else
            'lblInvalid.Text = "Your User Name and Password cannot be located, try again.!!!."
            Response.Redirect("PasswordSet.aspx")
        End If
    End Sub

[kenobewan]

Shouldn't you check the password before you try to update?

[vanc]

Yeah, that's exactly what your code should do!!! If you input wrong password, except "" password, your piece of code will Redirect you to that page not returns the invalid message, if you want to see that message you should input blank password.
If you want to display invalid password message you have to modify your code.

cheers.