how to get exactl y information from the database

[MCPD]

hello

i have an aspx page that Contains tow textBoxs and Button

i Must enter a correct username at the textbox 1 and password in textbox 2 that exists in database

my command have this code

MyCom = new SqlCommand("select * from Users where UserName='"+TextBox1.Text+"' and Password='"+TextBox2.Text+"'",MyCon);

i want to show an error message that containt "Your Password is Wrong" if the user enter a correct user name but wrong Password

and another message that say "UserName Is not found in our db" if the user enter an unavalable username

i used this code

if (DataReader.Read())
        {
            Response.Redirect("Default.aspx?uname="+TextBox1.Text);
        }
        else
        {
            MessageBox.Show("Invaild Data");
        }

but its not say where is the error exactly

its dont say if the username is wrong or the password

its just say invaild data

any body can help me ?!?

[ElmerCarias]

The only way is if you evaluate first if user exists,
"select count(*) from Users where UserName=@UserName"
execute and continues if result is 1, returns CustomCodeError like -1

then validate the user and password

"select count(*) from Users where UserName=@UserName and Password=@Password"

execute and returns 1 if is succesfull, and return -2 if not,

in the call to your function evaluate the result and show to the user the specific message for the result.

Elmer Carías
TI Consultant
El Salvador, Central America.