how to create Log-in form

[Resti M. Guay]

i have my database in my local server named SPMS which contains table named
"tbl_users", the table has the ff fields; "username", "password",
"employee_name".
In my Log-In form i have ff textbox "pass", and "uname". I need a code that
runs and check if password for the user name is on the record, and prompt a
msgbox showing the Employee Name.

resti
--
VB.net enthusiast

[Peter Jausovec]

Hi,

Try with sql: select employee_name from tbl_users where username = uname and
password = pass.

--
Regards,
Peter Jausovec
(http://blog.jausovec.net)
"Resti M. Guay" <Re********@discussions.microsoft.com> wrote in message
news:A6**********************************@microsof t.com...

i have my database in my local server named SPMS which contains table named
"tbl_users", the table has the ff fields; "username", "password",
"employee_name".
In my Log-In form i have ff textbox "pass", and "uname". I need a code
that
runs and check if password for the user name is on the record, and prompt
a
msgbox showing the Employee Name.

resti
--
VB.net enthusiast

[Flip]

> Try with sql: select employee_name from tbl_users where username = uname
and

password = pass.

Once you get this working, I would suggest taking a look at using parameters
to ward off sql injection security hacks. That's the type of hack where
user enters in ' or 1=1 as the password and if you use the above pseudo code
a bit too literally, you'll be exposing your whole site.

[Peter Jausovec]

Hi Filip,

Sure, I am aware of this, it was just an example and of couse is meant to be
used with parameters.

--
Regards,
Peter Jausovec
(http://blog.jausovec.net)
"Flip" <[remove]ph******@hotmail.com> wrote in message
news:%2***************@TK2MSFTNGP11.phx.gbl...

Try with sql: select employee_name from tbl_users where username = uname

and

password = pass.

Once you get this working, I would suggest taking a look at using
parameters
to ward off sql injection security hacks. That's the type of hack where
user enters in ' or 1=1 as the password and if you use the above pseudo
code
a bit too literally, you'll be exposing your whole site.