使用某种身份验证的C＃SQL登录

Question

I'm in the need of some help probably because I can't express very well what I want on google.

    private void LogInBt_Click(object sender, EventArgs e)
    {
        const string conString = @"Data Source=.\SQLEXPRESS;AttachDbFilename=H:\Jogos.mdf;Integrated Security=True;Connect Timeout=30;User Instance=True";
        SqlConnection con = new SqlConnection(conString);
        con.Open();
        SqlCommand log = new SqlCommand("SELECT * FROM Funcionario WHERE [e-mail] ='" + textBox1.Text + "' and Password ='" + textBox2.Text + "'", con);
        SqlDataReader dr;
        dr = log.ExecuteReader();
        int count = 0;
        while (dr.Read())
        {
            count += 1;
        }
        if (count == 1)
        {
            MessageBox.Show("Login Succesfull");
            if ()
            {
                Form menu = new MenuPrincipalAdmin();
                menu.Show();
                this.Hide();
            }

            else
            {
                Form menu = new MenuPrincipalFunc();
                menu.Show();
                this.Hide();
            }
        }
        else if (count > 0)
            MessageBox.Show("Duplicate e-mail and password.");
        else
            MessageBox.Show("E-mail or Password invalid.");
        textBox1.Clear();
        textBox2.Clear();
        con.Close();
    }

After the "Login Sucessfull" message box I wanted to make something like if permission = Admin then opens the AdminMenu else opens the WorkerMenu.

I think it's possible but not sure since I can't get my mind over it.

Answer 1

I would recommend you to learn, how the Auth works on the sample ASP.Net application in Visual Studio (it would be the same in MVC and WinForms). Then you could use that approach and similar DB in your application. It is really common functionality nowadays so there is no need to invent anything here.

Generally, it shouldn't be possible to store duplicated logins (and of cause login+password) in your database. You should use constraints for it.

For the logic below you should use Roles. For instance, you could use Users-UsersInRoles-Roles DB structure.

        if ()
        {
            Form menu = new MenuPrincipalAdmin();
            menu.Show();
            this.Hide();
        }

        else
        {
            Form menu = new MenuPrincipalFunc();
            menu.Show();
            this.Hide();
        }