change password in database table using asp.net with C#

[raj200809]

Hi,

I m trying update password in database using asp.net with c#.
I have three text box in my aspx page
Old password
New password
confirm password

i m using following code but its not resolving

step1 - this code in aspx.cs page

protected void btnchangepwd_Click(object sender, EventArgs e)
    {
        try
        {
            if (IsValid)
            {
 
                SqlCommand cmd = new SqlCommand("HMSFetchPassword", con);
                cmd.CommandType = CommandType.StoredProcedure;
                SqlDataReader dr;
                con.Open();
                cmd.Parameters.Add("@Pwd", this.txtoldpass.Text);
                dr = cmd.ExecuteReader();
                if (dr.Read()==null)
                {
                    if(txtoldpass.Text==txtnewpass.Text)
                    {
                        cmd.CommandText="HMSSP_UpdatePassword";
                        cmd.CommandType=CommandType.StoredProcedure;
                        cmd.Parameters.Add("@Pwd",this.txtoldpass.Text);
                       // cmd.ExecuteNonQuery();
                       lblmessage.Visible=true;
                       lblmessage.Text="Your Password Sucessfully changed.";
 
                    }
                    else
                    {
                   lblmessage.Visible = true;
                   lblmessage.Text = "Please enter correct Password ";
                    }
                dr.Close();
                con.Close();
            }
        }
      }
        catch (Exception ex)
        {
            Response.Write(ex.Message);
        }
    }

--------------------------------------------------------------------


step-2

CREATE procedure [dbo].[HMSSP_FetchPwd]
(
@Name varchar(200)
)
As
SET NOCOUNT ON
begin
select Pwd from TblHMSOwner_Reg where Name=@Name
End
 
create procedure [dbo].[HMSSP_UpdatePassword]
(
@Name Varchar(50),
@Pwd Varchar(50)
)
As
SET NOCOUNT ON
begin
update  TblHMSOwner_Reg
set Pwd=@Pwd where Name=@Name
End

hi if anyone have idea about it or have code then please help me
thanks in advance

[Frinavale]

You have:

  if(txtoldpass.Text==txtnewpass.Text)
 

Don't you want to have?

  if(txtnewpass.Text==txtconfirmpass.Text)

Then you have

  cmd.Parameters.Add("@Pwd",this.txtoldpass.Text);

But wouldn't you want to have?

  cmd.Parameters.Add("@Pwd",this.txtnewpass.Text);

Could you please explain what you are doing in your code?

Thanks
-Frinny

[raj200809]

You have:

  if(txtoldpass.Text==txtnewpass.Text)
 

Don't you want to have?

  if(txtnewpass.Text==txtconfirmpass.Text)

Then you have

  cmd.Parameters.Add("@Pwd",this.txtoldpass.Text);

But wouldn't you want to have?

  cmd.Parameters.Add("@Pwd",this.txtnewpass.Text);

Could you please explain what you are doing in your code?

Thanks
-Frinny

Have you code change password

[Frinavale]

Have you code change password

Every application will have a different way to change their password because their business rules will be different. Therefore, my code will not help you solve your problem.

In your case you should check to see if both the Confirm Password and New Password fields match before attempting to add it to the database (you are not currently doing this in your code).

You should also Update the user's password with the New Password if they do match (in your code you are currently updating the database with the Old Password...this is probably the main reason why your password is not updating...you're replacing the old password with the old password...).

-Frinny

[kunal pawar]

can u explain "HMSFetchPassword" coz u list HMSSP_FetchPwd but wht abt "HMSFetchPassword" store procedure and what it returns

              //Please explain the following line
              SqlCommand cmd = new SqlCommand("HMSFetchPassword", con);
                cmd.CommandType = CommandType.StoredProcedure;
                SqlDataReader dr;
                con.Open();
                cmd.Parameters.Add("@Pwd", this.txtoldpass.Text);
                dr = cmd.ExecuteReader();
                if (dr.Read()==null)
                {
                    if(txtoldpass.Text==txtnewpass.Text)
                    {
                        cmd.CommandText="HMSSP_UpdatePassword";
                        cmd.CommandType=CommandType.StoredProcedure;
                        cmd.Parameters.Add("@Pwd",this.txtoldpass.Text);
                       // cmd.ExecuteNonQuery();
                       lblmessage.Visible=true;
                       lblmessage.Text="Your Password Sucessfully changed.";
 
                    }
                    else
                    {
                   lblmessage.Visible = true;
                   lblmessage.Text = "Please enter correct Password ";
                    }
                dr.Close();
                con.Close();
            }
        }
      }
        catch (Exception ex)
        {
            Response.Write(ex.Message);
        }
    }

--------------------------------------------------------------------


step-2

CREATE procedure [dbo].[HMSSP_FetchPwd]
(
@Name varchar(200)
)
As
SET NOCOUNT ON
begin
select Pwd from TblHMSOwner_Reg where Name=@Name
End
 
create procedure [dbo].[HMSSP_UpdatePassword]
(
@Name Varchar(50),
@Pwd Varchar(50)
)
As
SET NOCOUNT ON
begin
update  TblHMSOwner_Reg
set Pwd=@Pwd where Name=@Name
End