var username = Request.Form["username"];
var password = Request.Form["password"];
var sqlString = "SELECT * FROM Users WHERE username ='" + username + "'
AND password = HASHBYTES('SHA2_512', '" + password + "'+ salt)" ;
var connString = WebConfigurationManager.ConnectionStrings
["NorthwindConnectionString"].ConnectionString;
using (var conn = new SqlConnection(connString)) { var
command = new SqlCommand(sqlString, conn);
var dataReader = command.ExecuteReader(CommandBehavior.SingleResult);
if (dataReader.HasRows){
loggedIn = true;
}
dataReader.Close();
}