Membership.ValidateUser Method
Verifies that the supplied user name and password are valid.
Assembly: System.Web (in System.Web.dll)
Parameters
- username
- Type: System.String
The name of the user to be validated.
- password
- Type: System.String
The password for the specified user.
Return Value
Type: System.Booleantrue if the supplied user name and password are valid; otherwise, false.
ValidateUser provides an easy way to verify a user name and password from the data source. Note that, if the username parameter is empty or a null reference (Nothing in Visual Basic), an HttpException is thrown.
The following code example shows the login page for an ASP.NET application configured to use forms authentication and the Membership class. If the supplied user credentials are invalid, a message is displayed to the user. Otherwise, the user is redirected to the originally requested URL by the RedirectFromLoginPage method.
Security Note |
|---|
This example contains a text box that accepts user input, which is a potential security threat. By default, ASP.NET Web pages validate that user input does not include script or HTML elements. For more information, see Script Exploits Overview. |
Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows XP SP2 x64 Edition, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2
The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.
Security Note