protected void Button1_Click(object sender, EventArgs e)
    {
        DataSet ds = DAL.GetUsersByPasswordAndUsername(username.Text, pass.Text);
        if (ds.Tables[0].Rows.Count == 0)
            Label8.Text = "שם משתמש או סיסמה אינם תקינים";
        else
        {
            Session["user"] = username.Text;
            Session["pass"] = pass.Text;
            Session["sec"] = ds.Tables[0].Rows[0]["Usec"];
            Response.Redirect("Home.aspx");
        }
    }


        DataSet ds = new DataSet();
        OleDbConnection con = new OleDbConnection(GetConnectionString());
        string CommandText = "SELECT * FROM Users WHERE UUserName='" + un + "' AND UPassword='" + pass + "'";
        OleDbCommand cmd = new OleDbCommand(CommandText, con);
        OleDbDataAdapter da = new OleDbDataAdapter(cmd);
        da.Fill(ds);
        return ds;