Chandradev's Blog

Hi

Since you are knowing that form authentication is more secure as compare to other authentication in asp.net. You can read more on “Authentication and authorization” from this excellent artical.
Authentication and authorization

We can do form authentication using sql server as database in asp.net as given bellow steps

Step1: Take a “Login” Control from asp.net Toolbox and kept on “Login.aspx” page.

Step2: Create “Home.aspx” page which will display after proper authentication.

Step3: Now click on “Login1_Authenticate” event of “Login” control of Login.aspx page and write the code like this

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data.SqlClient;
using System.Data;
using System.Web.Security;

public partial class _Default : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void Login1_Authenticate(object sender, AuthenticateEventArgs e)
    {
        using (SqlConnection con = new SqlConnection(" Here will be your connection string"))
        {
            using (SqlCommand cmd = new SqlCommand("Select UserName,Password from tblLogin where UserName=@UserName and Password=@Password", con))
            {
                cmd.Parameters.AddWithValue("@UserName", Login1.UserName);
                cmd.Parameters.AddWithValue("@Password", Login1.Password);
                SqlDataAdapter da = new SqlDataAdapter(cmd);
                DataTable dt = new DataTable();
                da.Fill(dt);
                if (dt.Rows.Count > 0)
                {
                    //This code is generating the Cookies 
                    FormsAuthentication.RedirectFromLoginPage(Login1.UserName, Login1.RememberMeSet);

                }
            }
        }
    }
}

Step4: Now go to webconfig file and make the configuration like this

 <authentication mode="Forms">
      <forms defaultUrl="Home.aspx" loginUrl="~/Login.aspx"
      slidingExpiration="true" timeout="20">
      </forms>
    </authentication>
    <authorization>
      <deny users="?"/>
    </authorization>

If authentication will be sucessful then it will display “Home.aspx”.