--- title: "Login form in ASP.Net" description: "Login form designing include a login page (shown above) , a page where user will be redirected after successful login and a sign out page which will b" author: "Anonymous User" published: 2010-07-27 updated: 2019-09-07 canonical: https://www.mindstick.com/articles/41/login-form-in-asp-dot-net category: "ado.net" tags: ["ado.net"] reading_time: 3 minutes --- # Login form in ASP.Net ![Login form in ASP.Net](https://www.mindstick.com/mindstickarticle/f55de7c4-0b0c-4295-a19b-7dd654755c6b/images/50e4d1da-e0e0-4466-9e01-765f4f82689c.png)\ ##### Design view of login form Login form designing include a login page (shown above) , a page where user will be redirected after successful login and a sign out page which will be displayed after signing out. ##### Design source for login page (Default.aspx) ```

``` ##### Screen shot of the above source ![Login form in ASP.Net](https://www.mindstick.com/mindstickarticle/f55de7c4-0b0c-4295-a19b-7dd654755c6b/images/2af1f0ae-1c54-44df-ad23-db276455ff29.png) ##### Asp.net code for login page (Default.aspx.cs) ``` protected void Page_Load(object sender, EventArgs e) { //checking whether session object is null or not. If null then label message //will display the following message else it will not display anything. if (Session["uname"] == null) Label3.Text= "Please enter User Name and Password!"; else Label3.Text=””; } //code when login button is clicked protected void btnLogin_Click(object sender, EventArgs e) { try { //creating connection to the database string sqlString= "Server=abc\\SQLEXPRESS; Database=proj1; User Id=sa;Password=sa"; SqlConnection con= new SqlConnection(sqlString); con.Open(); //executing command to fetch record only if username and password, provided //by the user matches with the database. SqlCommand cmd= new SqlCommand("select UserName, Password from login where UserName='" + txtUserName.Text.Trim() + "' and Password='" + txtPassword.Text + "'", con); SqlDataReader rdr =cmd.ExecuteReader(); //checking whether data reader contains any row. if (rdr.HasRows) { //creating session object to pass value from this page another page. Session["uname"] =txtUserName.Text; //redirecting to next page after successful login Response.Redirect("redir.aspx"); } else { //if data reader doesn’t contains any row, it means user name or password is //incorrect txtUserName.Text= ""; txtPassword.Text= ""; Label3.Text= "User Name/Password not correct"; } } catch (Exception ex) { Response.Write(ex.Message); } } ``` Once the login page is displayed we need to design a page to which the user will be redirected after successful login. ##### Design source for redirected page (redir.aspx) ```

``` ##### Screen shot of the above source ![Login form in ASP.Net](https://www.mindstick.com/mindstickarticle/f55de7c4-0b0c-4295-a19b-7dd654755c6b/images/ba74218d-b3bb-4b3b-9023-000142876ad4.png) ##### Asp.net code for redirected page (redir.aspx.cs) ``` protected void Page_Load(object sender, EventArgs e) { //checking whether session object contains value or not. If it contains value//then name of the user logged on will be displayed otherwise message message//“you are not logged in” will be displayed. if ((string)Session["uname"] != null) Label1.Text = "Welcome " + (string)Session["uname"]; else Label1.Text = "You are not logged in"; //in this instead of giving the current date we gave the date in the past so//it confirms the expiration of page. So that allowing for time differences,//rather than specify a static date. If your page is viewed by a browser in a//very different time-zone. Response.ExpiresAbsolute=DateTime.Now.AddDays(-1d); //Some IIS internals experts revealed this can be a very touchy parameter to//rely upon and usually requires a rather “large" negative number or//pedantically, that would be a very small number Response.Expires =-1500; // It tells the browser not to cache the page.//Things can work with only one line of code//i.e. Response.CacheControl = "no-cache";//But it is good practice to delete the existing page from cache.//This code will tell the server not to cache this page, due to this when//user clicks the Back button browser will not find the page in cache and//then will go to server side to get the page Response.CacheControl = "no-cache"; if (Session["uname"] == null) { Response.Redirect("default.aspx"); } Session["uname"] = null; } ``` ##### Design source for sign out page (signout.aspx) ```

You are successfully signed out.

To sign in again click here.

``` ##### Screen shot of the above source ![Login form in ASP.Net](https://www.mindstick.com/mindstickarticle/f55de7c4-0b0c-4295-a19b-7dd654755c6b/images/c9ef4871-4a70-4489-a500-f62fccd91537.png) ##### Asp.net code for sign out page (signout.aspx.cs) ``` protected void Page_Load(object sender, EventArgs e) { Response.ExpiresAbsolute= DateTime.Now.AddDays(-1d); Response.Expires= -1500; Response.CacheControl= "no-cache"; } ``` Screen shots ![Login form in ASP.Net](https://www.mindstick.com/mindstickarticle/f55de7c4-0b0c-4295-a19b-7dd654755c6b/images/42123cc7-3c3d-4b0c-b9c0-e11d7802e600.png) ![Login form in ASP.Net](https://www.mindstick.com/mindstickarticle/f55de7c4-0b0c-4295-a19b-7dd654755c6b/images/e4baf26d-824f-4b1a-88ff-a1e57e1ba59c.png) ![Login form in ASP.Net](https://www.mindstick.com/mindstickarticle/f55de7c4-0b0c-4295-a19b-7dd654755c6b/images/d5e5816f-bb48-47d3-be47-a67ffd39b4f7.png) --- Original Source: https://www.mindstick.com/articles/41/login-form-in-asp-dot-net Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.