ASP.NET

Dim conn As New System.Data.OleDb.OleDbConnection(MyConstants.sqlConnString)<br />
       Dim cmd As New System.Data.OleDb.OleDbCommand("", conn)<br />
       Dim dr As System.Data.OleDb.OleDbDataReader<br />
       Dim msG As String = ""<br />
       Try<br />
           conn.Open()<br />
           cmd.CommandText = "SELECT * FROM  MD_USERS WHERE U_USERNAME='" & Login1.UserName & "' AND U_PASSWORD='" & Login1.Password & "' "<br />
           dr = cmd.ExecuteReader<br />
           If dr.Read Then<br />
               Dim mu As New MyUser<br />
               mu._ID = dr.Item("U_ID")<br />
               mu._Name = dr.Item("U_CLASS") & " " & Myuser.SayDignity(dr.Item("U_DIGNITY")) & " " & dr.Item("U_NAME") & " " & dr.Item("U_SURNAME")<br />
               mu._CATEGORY = dr.Item("U_CATEGORY")<br />
               mu._AUTHORITY = dr.Item("U_AUTHORITY")<br />
               Session("MYUSER") = mu<br />
               e.Authenticated = True<br />
           End If<br />
       Catch ex As Exception<br />
           msG = ex.Message<br />
       Finally<br />
           dr.Close()<br />
           conn.Close()<br />
       End Try<br />
       If Not msj = "" Then<br />
           Session("msG") = msG<br />
           Response.Redirect("Messages.aspx")<br />
       End If<br />
   End Sub