Login cannot redirect to another page

I appreciate this @QiYou-MSFT

But please I got 2 more questions on this.

1. What does this mean "your custom data", can you please explain?
2. Can I use textbox control in-place of the input controls you used?

DateTime.Now.AddMinutes(30), chkPersistCookie.Checked, "your custom data");

@Donald Symmons

Question1：Gets a user-specific string stored with the ticket.

Question2:It is achievable.

The following is the relevant documentation:

Question1

Question2

So in question1, I'll leave the line at this, "your custom data", without writing anything ?

Hi @QiYou-MSFT

Please I want to personally seek your opinion on this, because I have tried exactly as you did in the code you shared to me and I’m still finding it doesn’t fire the click event.

So I decided to rewrite my login code after digging deeper into using authentication in my login.

Please help me check if it is okay

Here are how my login details goes:

I have 2 tables, one is the users table which stores user’s info, and user activation table that stores a bit of user ID and an activation code (which uses unique identifier as data type).

On sign up, user’s info is stored in both tables and an activation code is sent to user’s email. Then after user clicks on the activation code in his or her mailbox, the user is redirected to the activation page. And on the activation page load event, a delete function is done to delete that user’s data in the row in the activation table.

Finally, when user tries to login, it will check the login, as well as the activation table to see if the user’s data exists in the activation table. If user’s data exists in the activation table, then a message will show that user has not been activated, but if user’s data does not exist in the activation table, then user account has been activated. Other login process takes place..

LOGIN PAGE

protected void Page_Load(object sender, EventArgs e)
{
    if (!this.IsPostBack)
    {
        if (this.Page.User.Identity.IsAuthenticated)
        {
            FormsAuthentication.SignOut();
            Response.Redirect("~/Login.aspx");
        }
    }
}
  
protected void ValidateUser(object sender, EventArgs e)
{
//checks for empty textboxes
    if (!string.IsNullOrEmpty(textUser.Text) & !string.IsNullOrEmpty(txtPassword.Text))
    {
        using (SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\AuthenticationTestDatabase.mdf;Integrated Security = True"))
        {
//checks if user login details are correct 
            using (SqlCommand cmd = new SqlCommand("SELECT UserId FROM UserTable WHERE email = @email AND pass = @pass", con))
            {
                con.Open();
                cmd.Parameters.AddWithValue("@email", emailtxtbox.Text.Trim());
                cmd.Parameters.AddWithValue("@pass", Passwordtxtbox.Text.Trim());
                string UserId = Convert.ToString(cmd.ExecuteScalar());
                con.Close();
  
                if (!string.IsNullOrEmpty(Uid))
                {
//this part checks if the account has been activated
                    string users = "";
                    using (SqlCommand cmd1 = new SqlCommand("SELECT UserId FROM AccountActivation WHERE UserId = @UserId"))
                    {
                        cmd1.CommandType = CommandType.Text;
                        cmd1.Parameters.AddWithValue("@UserId", UserId);
                        cmd1.Connection = con;
                        con.Open();
                        users = Convert.ToString(cmd1.ExecuteScalar());
                        con.Close();
                    }
                    if (string.IsNullOrEmpty(users))
                    {
                        int user = 0;
                        using (SqlCommand cmd2 = new SqlCommand("SELECT UserId FROM UserTable WHERE pass = @pass COLLATE SQL_Latin1_General_CP1_CS_AS AND email = @email AND pass = @pass"))
                        {
                            cmd2.CommandType = CommandType.Text;
                            cmd2.Parameters.AddWithValue("@email", emailtxtbox.Text.Trim());
                            cmd2.Parameters.AddWithValue("@pass", Passwordtxtbox.Text.Trim());
                            cmd2.Connection = con;
                            con.Open();
                            user = Convert.ToInt32(cmd2.ExecuteScalar());
                            con.Close();
                        }
                        if (user > 0)
                        {
//this checks the last login and Is Active columns and updates both accordingly
                            Session["user"] = UserId;
                            con.Open();
                            string query = "SELECT LastLogin, IsActive from UserTable WHERE UserId = @UserId";
                            using (SqlCommand cmd3 = new SqlCommand(query, con))
                            {
                               cmd3.Parameters.AddWithValue("@UserId", Session["user"]);
                               Session["LastLogin"] = Convert.ToDateTime(cmd3.ExecuteScalar());
                            }
                            string UpdateLog = @"UPDATE UserTable SET LastLogin=@dateandtime, IsActive=@IsActive WHERE UserId = @UserId";
                            using (SqlCommand cmd4 = new SqlCommand(UpdateLog, con))
                             {
                                //updated LastLogin is used to display last login date and time of user
//Isactive is used to indicate if user is currently logged in
cmd.Parameters.AddWithValue("@dateandtime", DateTime.UtcNow);
                                cmd.Parameters.AddWithValue("@IsActive", "1");
                                cmd4.Parameters.AddWithValue("@UserId", Session["user"]);
                               cmd4.ExecuteNonQuery();
                             }
                            con.Close();
                        }
                        Session["user"] = UserId;
                        FormsAuthentication.RedirectFromLoginPage(UserId, true);
                    }
                    else
                    {
                        dvMessage.Visible = true;
                        lblMessage.Visible = true;
                        lblMessage.ForeColor = System.Drawing.Color.Red;
                        lblMessage.Text = "Account not activated";
                        txtPassword.Text = "";
                        txtPassword.Focus();
                    }
                }
                else
                {
                    dvMessage.Visible = true;
                    lblMessage.Visible = true;
                    lblMessage.ForeColor = System.Drawing.Color.Red;
                    lblMessage.Text = "Login Details are Invalid";
                    txtPassword.Text = "";
                    txtPassword.Focus();
                }
            }
        }
    }
    else
    {
        dvMessage.Visible = true;
        lblMessage.Visible = true;
        lblMessage.ForeColor = System.Drawing.Color.Red;
        lblMessage.Text = "Required Fields";
    }
}

Default Page

<h1>Home</h1>
<asp:Label ID="lblMessage" runat="server"></asp:Label>

Default Code

protected void Page_Load(object sender, EventArgs e)
{
    if (this.Page.User.Identity.IsAuthenticated)
    {
        lblMessage.Text = Session["user"].ToString();
    }           
}

Hi @Donald Symmons

First of all, let me tell you the first question:Gets a user-specific string stored with the ticket.It is usually not very important, and generally plays the role of identification.

Let me help you explain the second problem: the click event is unsuccessful.

I'll give you an example:If you want a **<input>**control (asp:buttont will also do) implement a functional event.

aspx:

<input type="submit" Value="Logon" runat="server" ID="cmdLogin" />

aspx.cs

protected void Page_Load(object sender, EventArgs e)

First you need to declare this feature when the page loads. Write cmdLogin_ServerClick next.

private void cmdLogin_ServerClick(object sender, System.EventArgs e)

I will give you an analysis of your needs. First of all, you need to put your project online so that others can get the website corresponding to the verification code in the email.

As for sending emails, I give you three classes for reference.

The MailMessage class, which is used to construct e-mail messages

The MailAttachment class, which is used to construct e-mail attachments

The SmtpMail class, which is used to send emails and their attachments

The other aspect of the problem is the content of a database CRUD.

You need to figure out SQLcommand.

Best Regards

Qi You