Dear All,

I am saving hash password and sal password in db.

But when I trying to retrieve password, the password doesn't match. why. below is my code.

Creating User

protected void Create_User()
{
try
{
string salt = GenerateSalt();
string password = HashPassword(txtpassword.Text, salt);
SqlCommand com = new SqlCommand("Create_User", con);
com.CommandType = CommandType.StoredProcedure;
com.Parameters.AddWithValue("@User_Id", txtUserId.Text);
com.Parameters.AddWithValue("@Password", password);
com.Parameters.AddWithValue("@Salt_Password", salt);
com.Parameters.AddWithValue("@Email", txtEmail.Text);
 

and when trying to login, it shows password did not match.

see code below

protected void Do_Login()
{
SqlCommand com2 = new SqlCommand("select_Salt_Password", con);
com2.CommandType = CommandType.StoredProcedure;
com2.Parameters.Add("@User_Id", SqlDbType.NVarChar, 50).Value = ddl.SelectedItem.Text;
SqlDataAdapter da1 = new SqlDataAdapter(com2);
DataTable dt1 = new DataTable();
da1.Fill(dt1);
string salt = dt1.Rows[0]["Salt_Password"].ToString();
string password = HashPassword(txtPassword.Text, salt);
SqlCommand com11 = new SqlCommand("For_Login1", con);
com11.CommandType = CommandType.StoredProcedure;
com11.Parameters.AddWithValue("@User_Id", ddl.SelectedItem.Text);
com11.Parameters.AddWithValue("@Password", password);
SqlDataAdapter sda = new SqlDataAdapter(com11);
DataTable dtcheck = new DataTable();
sda.Fill(dtcheck);
if (dtcheck.Rows.Count > 0)
{
}
else
{}

but still goes in else block. where I am making mistake?

Thanks