SqlMembershipProvider::ValidateUser Method (String^, String^)
Verifies that the specified user name and password exist in the SQL Server membership database.
Assembly: System.Web (in System.Web.dll)
Parameters
- username
-
Type:
System::String^
The name of the user to validate.
- password
-
Type:
System::String^
The password for the specified user.
Return Value
Type: System::Booleantrue if the specified username and password are valid; otherwise, false. A value of false is also returned if the user does not exist in the database.
This method is called by the Membership class to validate user information for a user in the SQL Server database specified in the ASP.NET application's configuration file (Web.config).
When a user is successfully validated, the last activity date and last sign-in date values are updated to the current date and time in the database.
If an incorrect password is supplied to the ValidateUser method, the internal counter that tracks invalid password attempts is incremented by one. This can result in the user being locked out and unable to log on until the lock status is cleared by a call to the UnlockUser method. If the correct password is supplied and the user is not currently locked out, then the internal counters that track invalid password and password-answer attempts are reset to zero. For more information, see the MaxInvalidPasswordAttempts and PasswordAttemptWindow properties.
Leading and trailing spaces are trimmed from all parameter values.
The following code example shows the sign-in page for an ASP.NET application configured to use forms authentication and the SqlMembershipProvider. If the supplied user credentials are invalid, a message is displayed to the user. Otherwise, the user is redirected to the originally requested URL using the RedirectFromLoginPage method.
Note |
|---|
This example uses the Membership class to call the SqlMembershipProvider specified as the defaultProvider in the Web.config file. If you need to access the default provider as the type SqlMembershipProvider, you can cast the Provider property of the Membership class. To access other configured providers as a specific provider type, you can access them by their configured name with the Providers property of the Membership class and cast them as the specific provider type. |
Available since 2.0
