Web Development

public void OnLogin(object sender, System.EventArgs e)
{
	if(IsLoginCorrect(User.Text, Pass.Text))
	{
		FormsAuthentication.RedirectFromLoginPage(User.Text, false);
	}
	else
	{
		Error.Text = "Fel, försök igen!";
	}
}

public bool IsLoginCorrect(string user, string password)
{
	string connectString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" + Server.MapPath("mp219.mdb");
	OleDbConnection connection = new OleDbConnection(connectString);
	
	try
	{
		connection.Open();

		StringBuilder builder = new StringBuilder();
		builder.Append("SELECT COUNT(*) FROM Loin WHERE User = \'");
		builder.Append(user);
		builder.Append("\' AND CAST (rtrim (Password) as VARBINARY) = CAST(\'");
		builder.Append(password);
		builder.Append("\' as VARBINARY");
		
		OleDbCommand cmd = new OleDbCommand(builder.ToString(), connection);
		
		int count = (int)cmd.ExecuteScalar();
		return (count > 0);
	}
	catch(Exception e)
	{
		Response.Write(e.ToString());
		return false;
	}
	finally
	{
		connection.Close();
	}
}