Hello friend..
You Can do this by Two Way..
1) Using all code done in VB.NET
2) Using a Store Procedure
1)Using all code done in VB.NET
NOTE:
"all the code below is done in asp.net with vb.net you need to change as per your requirment"
Imports System.Data.SqlClient
Imports System.Data
Public Class _Default
Inherits System.Web.UI.Page
Dim sqlCon As SqlConnection
Dim sqlDa As SqlDataAdapter
Dim dt As DataTable
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
If (Not IsPostBack) Then
sqlCon = New SqlConnection("Your Connection string goes here")
End If
End Sub
Protected Sub btnChangePass_Click(ByVal sender As Object, ByVal e As EventArgs) Handles btnChangePass.Click
Dim userName As String
Dim oldPass As String = txtOldPass.Text
Dim newPass As String = txtNewPass.Text
If (oldPass.Equals(newPass)) Then
userName = "Your User Name Goes Here"
dt = New DataTable()
sqlCon.Open()
sqlDa.SelectCommand = New SqlCommand("SELECT * FROM USERTABLE WHERE USERNAME = @UserName AND PASS = @Pass", sqlCon)
sqlDa.SelectCommand.Parameters.AddWithValue("@UserName", userName)
sqlDa.SelectCommand.Parameters.AddWithValue("@UserName", oldPass)
dt.Clear()
sqlDa.Fill(dt)
If (dt.Rows.Count > 0) Then
Dim userID As String = dt.Rows(0)("YOUR ID COLUMN").ToString()
sqlDa.UpdateCommand = New SqlCommand("UPDATE USERTABLE SET PASS = @NewPass WHERE UserID = @UserID", sqlCon)
sqlDa.UpdateCommand.Parameters.AddWithValue("@NewPass", newPass)
sqlDa.UpdateCommand.Parameters.AddWithValue("@UserID", userID)
sqlDa.UpdateCommand.ExecuteNonQuery()
End If
Else
End If
End Sub
End Class
2) Using a Store Procedure
CREATE PROCEDURE SP_CHANGE_PASS
@UserName nvarchar(20),
@OldPass nvarchar(20),
@newPass nvarchar(20),
@ResultID int = NULL
AS
BEGIN
SET NOCOUNT ON;
SELECT @ResultID = ID FROM TestTable WHERE Name = @UserName AND pass = @OldPass
IF(@ResultID IS NOT NULL)
BEGIN
UPDATE TestTable SET pass = @newPass WHERE ID = @ResultID
END
END
GO
For use of this sp you need to pass three parameter like user name, oldPass and new pass,
just only call that sp and it will done all your work for you of changing password.
you can also add a output parameter as result of this sp for you use in code page of vb.net