C SHARP PRACTICALS

Hardcoding for login

Student_Dashboard hamza = new Student_Dashboard();

AdminDashboard ad = new AdminDashboard();

if (un.Text == "")
{
MessageBox.Show("Enter username");

} else if (pass.Text == "")

{
MessageBox.Show("Enter password");
}
else
{
if ((un.Text == "1234" && (pass.Text == "tsu")))
{
hamza.Show();
}
else if ((un.Text == "012" && (pass.Text == "sam")))
{
ad.Show();
}
else
{
MessageBox.Show("invalid username or password");
}
}
}
PRACTICALS

using System.Data.SqlClient;

An exception of type 'System.Data.SqlClient.SqlException' occurred in System.Data.dll

login logic ONE

if (un.Text == "")
{
MessageBox.Show("Enter username");
}
else if (pass.Text == "")
{
MessageBox.Show("Enter Password");
}
else
{
try
{
SqlConnection con = new SqlConnection(@"Data Source=DESKTOP-39PEAQ2\
SQLEXPRESS;Initial Catalog=tsudatabase;Integrated Security=True");
con.Open();
SqlCommand cmd = new SqlCommand("select * from [user] where username =
@username and password = @password", con);
cmd.Parameters.AddWithValue("@username", un.Text);
cmd.Parameters.AddWithValue("@password", pass.Text);
SqlDataAdapter da = new SqlDataAdapter(cmd);
DataTable dt = new DataTable();
da.Fill(dt);
if (dt.Rows.Count > 0)
{
 ad.Show();
this.Hide();
MessageBox.Show("login successful ");
}
else
{
MessageBox.Show("username or password invalid ");
}
}
catch (System.Data.SqlClient.SqlException sqlException)
{
System.Windows.Forms.MessageBox.Show(sqlException.Message);
}
}

Login logic TWO

string username;
string password;

using (SqlConnection con = new SqlConnection(@"Data Source=DESKTOP-

39PEAQ2\SQLEXPRESS;Initial Catalog=tsudatabase;Integrated Security=True"))
{
con.Open();

using (var cmd = new SqlCommand("SELECT username,password FROM [user]

WHERE username = @id", con))
{
cmd.Parameters.AddWithValue("@id", un.Text);

SqlDataReader Read = cmd.ExecuteReader();

if (Read.Read() == true)
 {
username = Read[0].ToString();
password = Read[1].ToString();
ad.Show();
this.Hide();
MessageBox.Show("User Registration successful", username +" "+
password);
}
else
{
MessageBox.Show("No Employee found.");
}

Read.Close();
}
}
}
catch (System.Data.SqlClient.SqlException sqlException)
{
System.Windows.Forms.MessageBox.Show(sqlException.Message);
}
}

REGISTRATION OR INSERT LOGIC

try
{
SqlConnection con = new SqlConnection(@"Data Source=DESKTOP-39PEAQ2\
SQLEXPRESS;Initial Catalog=tsudatabase;Integrated Security=True");
con.Open();
SqlCommand cmd = new SqlCommand("insert into [user] (username, password,
firstname, lastname, role) values ( '" + textBox1.Text + "','" + textBox2.Text + "','" +
textBox3.Text + "','" + textBox4.Text + "','" + textBox5.Text + "' )", con);
cmd.ExecuteNonQuery();
con.Close();
MessageBox.Show("User was added successful ");
 }
catch (System.Data.SqlClient.SqlException sqlException)
{
System.Windows.Forms.MessageBox.Show(sqlException.Message);
}

GRIDEVIEW LOGIC

protected void view_user_details()

{
SqlConnection con = new SqlConnection(@"Data Source=DESKTOP-39PEAQ2\
SQLEXPRESS;Initial Catalog=tsudatabase;Integrated Security=True");

con.Open();

SqlCommand cmd = new SqlCommand("Select * from [user]");

cmd.Connection = con;

SqlDataAdapter sda = new SqlDataAdapter(cmd);

DataTable dt = new DataTable();

sda.Fill(dt);

GridView1.DataSource = dt;

//GridView1.DataBind();

con.Close();

UPDATE LOGIC

try
{

var updateCommand = "UPDATE [user] SET [password] = @password, [firstname]

= @firstname,[lastname] = @lastname, [role] = @role WHERE [username] = @username";
 using (SqlConnection connection = new SqlConnection(connectionString))
{
//connection.Open();
SqlCommand command = new SqlCommand(updateCommand, connection);

command.Parameters.AddWithValue("@username", textBox10.Text);
command.Parameters.AddWithValue("@password", textBox9.Text);
command.Parameters.AddWithValue("@firstname", textBox8.Text);
command.Parameters.AddWithValue("@lastname", textBox7.Text);
command.Parameters.AddWithValue("@role", textBox6.Text);
command.Connection.Open();
command.ExecuteNonQuery();
MessageBox.Show("User was Updated successful ");
}

}
catch (System.Data.SqlClient.SqlException sqlException)
{
System.Windows.Forms.MessageBox.Show(sqlException.Message);
}

SEARCH LOGIC

try
{

using (SqlConnection con = new SqlConnection(@"Data Source=DESKTOP-

39PEAQ2\SQLEXPRESS;Initial Catalog=tsudatabase;Integrated Security=True"))
{
con.Open();

using (var cmd = new SqlCommand("SELECT * FROM [user] WHERE username

= @id", con))
{
cmd.Parameters.AddWithValue("@id", searchtextBox.Text);

SqlDataReader Read = cmd.ExecuteReader();

if (Read.Read() == true)
{
textBox10.Text = Read[0].ToString();
textBox9.Text = Read[1].ToString();
textBox8.Text = Read[2].ToString();
textBox7.Text = Read[3].ToString();
textBox6.Text = Read[4].ToString();
}
 else
{
MessageBox.Show("No Employee found.");
}

Read.Close();
}
}
}
catch (System.Data.SqlClient.SqlException sqlException)
{
System.Windows.Forms.MessageBox.Show(sqlException.Message);
}