using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data;
using System.Data.SqlClient;
using System.Security.Cryptography;
using System.Configuration;
public partial class LOG_IN : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }

    protected void LogIn_Click(object sender, EventArgs e)
    {
        using (SqlConnection con = new SqlConnection(Helper.GetConnection()))
        {
            con.Open();
            string query = @"SELECT PersonalID, FirstName FROM Personals
                WHERE Username=@Username AND Password=@Password";
            using (SqlCommand cmd = new SqlCommand(query, con))
            {
                cmd.Parameters.AddWithValue("@Username", UserName.Text);
                cmd.Parameters.AddWithValue("@Password", Password.Text);
                using (SqlDataReader data = cmd.ExecuteReader())
                {
                    if (data.HasRows)
                    {
                        while (data.Read())
                        {
                            Session["PersonalID"] = data["PersonalID"].ToString();
                            Session["FirstName"] = data["FirstName"].ToString();

                        }
                        Response.Redirect("Gian.aspx");
                    }
                    else
                    {
                        error.Visible = true;
                    }
                }
            }
        }
    }
}