protected void Button1_Click(object sender, EventArgs e)
{
SqlCommand cmd = new SqlCommand("Select * from Users Where userName='"+textBox1.Text"' AND password='"+textBox2.Text+"'", myConnection);
if (cmd.ExecuteReader().HasRows) authenticated=true;
...
}
translates into something like :
stupid dangerous void Button1_Click(object sender, EventArgs e)
{
[PtentialObsenity()]SqlCommand cmd = new SqlCommand("Select * from Users Where userName='"+textBox1.Text"' AND password='"+textBox2.Text+"'", myConnection);
if (cmd.ExecuteReader().HasRows) authenticated=true;
...
MessageBox.Show("April Fools, thanks for reading this far");
}