Login page in asp.net

create table as follows

username	password	role	status
admin	admin	admin	True
svenu	svenu	stock	True
pvenu	pvenu	purchase	True
venu	venu	admin	True

create procedure as

alter proc sp_login(@uname varchar(50),@psw varchar(50))
as
select * from logintable where username=@uname and password=@psw and status=1

 --------------
exec sp_login 'venu','venu'

add a sqlhelperclass as vineetlabs and

create a class file with name as login.cs

using System.Data.SqlClient;
using vineetlabs;
public class login
{
    connection obj = new connection();
    public SqlDataReader login1(string un,string psw)
    {
        SqlParameter[] param = new SqlParameter[2];
        param[0] = new SqlParameter("@uname",un);
        param[1] = new SqlParameter("@psw",psw);
        obj.dr = SqlHelper.ExecuteReader(obj.con,CommandType.StoredProcedure,"sp_login",param);
        return obj.dr;
         obj.dr.Read();
}


next go to bushiness logic that is login.aspx.cs

protected void btn_login_Click1(object sender, EventArgs e)
    {
        SqlDataReader dr = obj1.login1(txt_uname.Text, txt_psw.Text);
        if (dr.Read())
        {
            if (dr[2].ToString() == "sales")
            {
                Response.Redirect("~/SalesManagement/SalesHome.aspx");
            }
            else if(dr[2].ToString()=="purchase")
            {
                Response.Redirect("~/PurchaseManagement/purchaseOrder.aspx");
            }
            else if (dr[2].ToString() == "admin")
            {
                Response.Redirect("~/Administrator/adminhome.aspx");
            }
            else if (dr[2].ToString() == "stock")
            {
                Response.Redirect("~/Inventory/InventoryHome.aspx");
            }
            else
            {
               lbl.Text = "<script>"+Environment.NewLine+"window.alert('Invalid User')</script>";
               Page.Controls.Add(lbl);
               
            }
        }