Default.cshtml

@{
    Layout = "~/_SiteLayout.cshtml";
    Page.Title = "Home Page";

    //Database connection
    string connectionString = @"Data Source=(LocalDB)\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\WeddingPage.mdf;Integrated Security=True";

    string provider = "System.Data.SqlClient";

    Database db = Database.OpenConnectionString(connectionString, provider);


    //Validation
    Validation.RequireField("email", "Please enter an email adress");
    Validation.RequireField("emailRegister", "Please enter an email adress");
    Validation.RequireField("password", "Please enter a password");
    Validation.RequireField("passwordRegister", "Please enter a password");
    Validation.RequireField("nameRegister", "Please add a name");
    Validation.RequireField("number", "Please enter a marriage number");
    Validation.Add("emailregister", Validator.StringLength(50, 5, "Please enter a correct email adress"));

    //Double data
    if (IsPost && db.Query("SELECT EMAIL FROM USERS WHERE EMAIL = @0", Request["emailRegister"]).Count() > 0 && Request.Form["Register"] == "Register")
    {
        Validation.AddFormError("An account has already been made with this email adress");
    }
    //Register
    else if (IsPost && Request.Form["Register"] == "Register")
    {
        Session["email"] = Request["emailRegister"];
        Session["name"] = Request["nameRegister"];
        Session["password"] = Request["passwordRegister"];
        if (Validation.GetErrors().Count() != 0)
        {
            Random r = new Random();
            int i = 0;
            do
            {
                Session["marId"] = r.Next(100000, 999999);
                i++;
            } while (Session["marId"] == db.QuerySingle("SELECT MARRIAGE_ID FROM USERS WHERE MARRIAGE_ID = @0", Session["marId"]) && i < 100000);
            db.Execute("INSERT INTO USERS (NAME, EMAIL, PASSWORD, MARRIAGE_ID) VALUES (@0, @1, @2, @3)", Session["name"], Session["email"], Session["password"], Session["marId"]);
            Session["UID"] = db.QuerySingle("SELECT USERID FROM USERS WHERE EMAIL = @0 AND PASSWORD = @1", Session["email"], Session["password"]);
            Response.Redirect("~/Registered.cshtml");
        }
    }
    //Login
    else if (IsPost && Request.Form["Login"] == "Login")
    {
        if (db.QuerySingle("SELECT USERID FROM USERS WHERE EMAIL = @0 AND PASSWORD = @1", Request["email"], Request["password"]) != null)
        {
            var UID = db.QuerySingle("SELECT USERID FROM USERS WHERE EMAIL = @0 AND PASSWORD = @1", Request["email"], Request["password"]);
            Session["marId"] = Request.Form["number"];
            Session["UID"] = UID;
            Response.Redirect("~/HomePage.cshtml");
        }
    }
}


@{
    if (Request.QueryString["login"] == "login")
    {
        <div id="login">
            <form method="post" name="login" action="" accept-charset="utf-8">
                <label for="email">Email:</label>
                <input type="text" name="email" placeholder="myEmail@email.com" />
                <label for="password">Password:</label>
                <input type="password" name="password" placeholder="Password" />
                <label for="code">Marriage code:</label>
                <input type="number" name="code" placeholder="XXXXXX" />
                <input type="submit" name="Login" value="Login">
            </form>
        </div>
    }
    else if (Request.QueryString["register"] == "register")
    {
        <div id="register">
            <form method="post" name="register" action="" accepted-charset="utf-8">
                <label for="emailRegister">Email:</label>
                <input type="email" name="emailRegister" placeholder="myEmail@email.com" />
                <label for="nameRegister">Name:</label>
                <input type="text" name="nameRegister" placeholder="John Smith">
                <label for="passwordRegister">Password:</label>
                <input type="password" name="passwordRegister" placeholder="Password" />
                <input type="submit" name="Register" value="Register" />
            </form>
        </div>
    }
    else
    {
        <div id="loginselect">
            <form method="get" name="loginselect" action="">
                <button name="login" value="login">Login</button>
                <button name="register" value="register">Register</button>
            </form>
        </div>
    }
        <form method="post" name="login" action="">
            @Html.Hidden("email", "dannypas00@outlook.com")
            @Html.Hidden("password", "Test123")
            @Html.Hidden("number", 678423)
            <label for="Login">Admin Login:</label><br />
            <input type="submit" name="Login" value="Login" />
        </form>
}