using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.OleDb;

public partial class MasterPage : System.Web.UI.MasterPage
{
    protected void Page_Load(object sender, EventArgs e)
    {
        ErroreUtente.Visible = false;
        ErrorePass.Visible = false;
    }
    
    protected void Login_click(object sender, EventArgs e)
    {
        ErrorePass.Visible = false;
        ErroreUtente.Visible = false;

        if (Page.IsValid)
        {
            String strConn = "PROVIDER=Microsoft.Jet.OLEDB.4.0;DATA SOURCE=" + Server.MapPath("Lam.mdb") + ";";
            OleDbConnection Conn = new OleDbConnection(strConn);
            Conn.Open();

            String strSQL = "SELECT Password FROM Utenti WHERE Username = '" + User.Text + "'";
            OleDbCommand Cmd = new OleDbCommand(strSQL, Conn);

            //Create a datareader, connection object
            OleDbDataReader Dr = Cmd.ExecuteReader(System.Data.CommandBehavior.CloseConnection);

            //Get the first row and check the password.
            if (Dr.Read())
            {
                if (Dr["Password"].ToString() == Pass.Text)
                {
                    Session["User"] = User.Text;
                    Session["Aut"] = "OK";
                    Response.Redirect("prova.aspx");
                }
                else
                    ErroreUtente.Visible = true;
            }
            else
                ErrorePass.Visible = true;

            Dr.Close();
        }
    }
}