using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using MySql.Data.MySqlClient;




    public partial class _Default : System.Web.UI.Page
    {
        MySqlConnection mysqlcon;


        protected void Page_Load(object sender, EventArgs e)
        {
            Application["auth"] = false;
            
            String con = "";
            con = "server=localhost; user id=root; password=test; database=cs;";
            mysqlcon = new MySqlConnection(con);
            mysqlcon.Open();
        }
        protected void TextBox1_TextChanged(object sender, EventArgs e)
        {

        }

        protected void login_Click(object sender, EventArgs e)
       {
           string formPassword = Request.Form["password"];
            
        string hashedPassword = FormsAuthentication.HashPasswordForStoringInConfigFile(formPassword, "sha1");
        string dbPassword = "";
        string dbUser = "";
        
        
        MySqlCommand cmd = mysqlcon.CreateCommand();
        MySqlDataReader recordset = mysqlcon.ExecuteReader();

        cmd.CommandText = "SELECT userid, password from auth where password = '" + hashedPassword + "'";

        recordset = cmd.EndExecuteReader();

        while (recordset.Read())
        {
            dbUser = recordset.GetString(0);
            dbPassword = recordset.GetString(1);
        }

        if (Request.Form["userid"] == dbUser && hashedPassword == dbPassword)
        {
            Application["auth"]=true;
            Response.Redirect("enterInv.aspx");
        }



    }
 }