Question

I have the following code to check for valid users:

protected void Login_LoginError(object sender, EventArgs e) {
    //See if this user exists in the database 

    MembershipUser userinfo = Membership.GetUser(Login.UserName);

    if (userinfo == null || !userinfo.IsApproved || userinfo.IsLockedOut) {
        //The user entered an invalid username/password...
        Login.FailureText = "Invalid User/Password";
    } else {
        Login.FailureText = string.Empty;
    }
}

This code doesn’t show the failure text when the password is wrong for users, I need code-behind logic for validating both the user and password! Any suggestions appreciated.

Answer 1

You should use the Authenticate handler on the login control. For more reading see this link

If you’re using the out of the box MembershipProvider you can authenticate your user with the Membership.ValidateUser method in the Authenticate handler.