ASP.NET
A set of technologies in the .NET Framework for building web applications and XML web services.
3,251 questions
Multiple accounts for a single login details
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 74%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
Donald Symmons
2,856
Reputation points
Hello everyone,
I REALLY NEED YOUR ASSISTANCE/HELP ON THIS
I have a very fascinating design which I want to achieve in my project. It may seem complex though but it will be great if I achieve it and I hope it will not be too misunderstanding; I hope you understand what I mean, and I will be totally grateful if I get help. Thank you.
If I have registered Admin (Admin A and Admin B) on my website application. I want a situation where Admin can invite users to be on his team. But what if the user is already registered to another Admin?
Example:
There are two Admin accounts currently registered (Admin A and Admin B), with emails (admin1@Monique gmx .com and adminB@Monique gmx .com). Then I have user A, with email (UserA@Monique gmx .com). When Admin A invites user A (UserA@Monique gmx .com) to join his team; if UserA@Monique gmx .com does not exists, then it should send an invite button for User A to register. But if UserA@Monique gmx .com exists then it should send a button for User A to login.
HERE IS WHERE IT BECOMES TRICKY:
If User A exists it simply means that User A is already registered under an Account; and has a password. Now, when Admin A sends User A an invite and User A is already registered; at that point Admin A must have re-inserted User A’s email and the same password User A used when registering, but under a different Name (which means that Admin A re-inserted User A’s existing login details but under Admin A’s name). Now User A will be registered under two admin accounts, so that after login and redirecting to dashboard, an option to switch accounts will be displayed on the dashboard. The user can switch account which he or she want to work on.
This is a sample image where user switch account.
At the same time, user A can register his own account as an admin with the same email (UserA@Monique gmx .com) but different name, because user A has existing account as a user to Admin A and Admin B, and can either work for Admin A, Admin B or for self.
The Table Schema will look like below, but I don’t know if it can get mixed up upon login. Maybe when someone tries to login it could cause irregularities in the table and maybe give errors
The login will be where it will matter because when logging in, how will it be able read an email and password that appears multiple times in the table? This is where it gets more complex for me.
Now I want to have it that Admin cannot be registered twice as Admin but if another Admin sends an invite or re-inserts the same email and password an Admin used then that Admin can have his or her details in the database table but as a user to another account. Also, an Admin CANNOT be registered as a user under his own account. That is, one email should be registered as Admin with same name once and cannot be registered as User under that same name, but can be registered as user under a different name.
On the dashboard, it is going to display account information from database tables like below, where user can switch accounts by clicking dropdown that display the different account he is registered to
protected void Page_Load(object sender, EventArgs e)
{
showdata1();
}
public void showdata1()
{
SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\Dataregister.mdf;Integrated Security = True");
con.Open();
SqlCommand cmd = new SqlCommand();
cmd.CommandText = "SELECT * FROM userTable WHERE Uid = '" + Session["user"] + "'";
cmd.Connection = con;
SqlDataAdapter sda = new SqlDataAdapter();
DataSet ds = new DataSet();
sda.SelectCommand = cmd;
sda.Fill(ds, "detail");
if (ds.Tables[0].Rows.Count > 0)
{
named.Text = ds.Tables[0].Rows[0][2].ToString();
user.Text = ds.Tables[0].Rows[0][3].ToString();
createby.Text = ds.Tables[0].Rows[0]["CreatedBy"].ToString();
}
}
These are pages to effect this:
Signup.aspx
InviteUser.aspx
Newuser.aspx
login.aspx
This is the code to register as new Admin. It should check if an email with the same name is already registered as an Admin and if it exists, it should not insert.
Signup code
protected void Button1_Click(object sender, EventArgs e)
{
SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\Dataregister.mdf;Integrated Security = True");
SqlDataReader dr;
using (SqlCommand cmd = new SqlCommand())
{
cmd.Parameters.Clear();
cmd.CommandText = "SELECT * FROM userTable WHERE email=@email OR Name=@Name";
cmd.Parameters.AddWithValue("@email", mailtxtbx.Text);
cmd.Parameters.AddWithValue("@Name", txtname.Text);
cmd.Connection = con;
con.Open();
dr = cmd.ExecuteReader();
}
if (dr.HasRows)
{
dvMessage.Visible = true;
Div1.Visible = false;
lblMessage.Text = "Email cannot be registered with same name";
lblMessage.ForeColor = System.Drawing.Color.Red;
mailtxtbx.Text = "";
lblsuccess.Visible = false;
lblMessage.Visible = true;
mailtxtbx.Focus();
}
else
{
con.Close();
if (mailtxtbx.Text != "" & pass.Text != "" & conpass.Text != "" & txtname.Text != "")
{
if (pass.Text == conpass.Text)
{
if (Filedoc.PostedFile.FileName != "")
{
if (check1.Checked)
{
int Uid = -1;
byte[] image;
Stream s = Filedoc.PostedFile.InputStream;
BinaryReader br = new BinaryReader(s);
image = br.ReadBytes((Int32)s.Length);
string query = @"INSERT INTO userTable (email, pass, Role, Name, CreatedBy, image, CreateDate, LastLogin) VALUES (@email, @pass, @Role, @Name, @CreatedBy, @image, @CreateDate, @LastLogin);
SELECT SCOPE_IDENTITY();";
using (SqlCommand objCMD = new SqlCommand(query, con))
{
objCMD.Parameters.Add("@email", SqlDbType.VarChar, 50).Value = mailtxtbx.Text.Trim();
objCMD.Parameters.Add("@pass", SqlDbType.VarChar, 100).Value = pass.Text.Trim();
objCMD.Parameters.Add("@Role", SqlDbType.VarChar, 50).Value = "Admin";
objCMD.Parameters.Add("@Name", SqlDbType.VarChar, 50).Value = txtname.Text.Trim();
objCMD.Parameters.Add("@CreatedBy", SqlDbType.VarChar, 50).Value = mailtxtbx.Text.Trim();
objCMD.Parameters.Add("@image", SqlDbType.VarBinary).Value = image;
objCMD.Parameters.Add("@CreateDate", SqlDbType.DateTime, 100).Value = DateTime.Now;
objCMD.Parameters.Add("@LastLogin", SqlDbType.DateTime, 100).Value = DateTime.Now;
cmd.Connection = con;
con.Open();
object returnObj = objCMD.ExecuteScalar();
if (returnObj != null)
{
int.TryParse(returnObj.ToString(), out Uid);
}
con.Close();
}
if (Uid > 0)
{
query = @"INSERT INTO Archive (Uid, email, Name) VALUES (@Uid, @email, @Name)";
using (SqlCommand objCMD = new SqlCommand(query, con))
{
objCMD.Parameters.Add("@Uid", SqlDbType.Int, 50).Value = Uid;
objCMD.Parameters.Add("@email", SqlDbType.VarChar, 50).Value = mailtxtbx.Text.Trim();
objCMD.Parameters.Add("@Name", SqlDbType.VarChar, 50).Value = txtname.Text.Trim();
con.Open();
objCMD.ExecuteNonQuery();
SendActivationEmail(Uid);
lblsuccess.Text = "An Activation link has been sent to your Email.";
lblsuccess.Visible = true;
Div1.Visible = true;
lblsuccess.ForeColor = System.Drawing.Color.Green;
lblMessage.Visible = false;
dvMessage.Visible = false;
mailtxtbx.Text = "";
pass.Text = "";
conpass.Text = "";
txtname.Text = "";
}
}
con.Close();
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.Text = "Please Check Box";
lblsuccess.Visible = false;
lblMessage.ForeColor = System.Drawing.Color.Red;
}
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.Text = "Upload your Logo";
lblsuccess.Visible = false;
lblMessage.ForeColor = System.Drawing.Color.Red;
}
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.Text = "Passwords don't match";
lblMessage.ForeColor = System.Drawing.Color.Red;
conpass.Text = "";
lblsuccess.Visible = false;
}
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.ForeColor = System.Drawing.Color.Red;
lblMessage.Text = "All Fields Are Required";
lblsuccess.Visible = false;
}
}
}
Code to invite user: Here, I want it to check if the user email exists then it should send a login button instead of sending a new user sign up button. The when this user goes to login, it will login and redirect, then the user can choose to switch account.
protected void Page_Load(object sender, EventArgs e)
{
if (!this.IsPostBack)
{
showdata1();
}
}
public void showdata1()
{
SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\Dataregister.mdf;Integrated Security = True");
con.Open();
SqlCommand cmd = new SqlCommand();
cmd.CommandText = "SELECT * FROM userTable WHERE Uid = '" + Session["user"] + "'";
cmd.Connection = con;
SqlDataAdapter sda = new SqlDataAdapter();
DataSet ds = new DataSet();
sda.SelectCommand = cmd;
sda.Fill(ds, "detail");
if (ds.Tables[0].Rows.Count > 0)
{
Label1.Text = ds.Tables[0].Rows[0]["Uid"].ToString();
labeladmin.Text = ds.Tables[0].Rows[0]["Name"].ToString();
mailtext.Text = ds.Tables[0].Rows[0]["email"].ToString();
}
}
protected void Button1_Click(object sender, EventArgs e)
{
if (!string.IsNullOrEmpty(Emailtxtbx.Text))
{
string adminID = Label1.Text.ToString();
using (MailMessage mm = new MailMessage("project@mail.com", Emailtxtbx.Text))
{
mm.Subject = "Membership Registration";
string body = "Hello " + Emailtxtbx.Text.Trim() + ",<br /><br />";
body += "You have just been invited to join the " + labeladmin.Text + " team";
body += "<br /><br />Please click the button below to sign up and join the " + labeladmin.Text + " team";
body += "<br /><br /><a style='display: block; width: 195px; height: 31px; background: #32CD32;padding: 10px;font-family: Nunito; text-align:left; border-radius: 5px;color: white;font-weight: 700;text-decoration: none;' href = '"
+ Request.Url.AbsoluteUri.Replace("newmember", "NewUserSignup.aspx?Id=" + adminID) + "'>Sign up as Team Member</a>";
body += "<br /><br /><hr />";
body += "<br /><br />If you have questions regarding this invitation, kindly contact " + labeladmin.Text + " at";
body += "<br />" + mailtext.Text;
body += "<br /><br />Best Regards,<br />The Project Team";
mm.Body = body;
mm.IsBodyHtml = true;
SmtpClient smtp = new SmtpClient();
smtp.Host = "relay-hosting.secureserver.net";
smtp.EnableSsl = false;
NetworkCredential NetworkCred = new NetworkCredential("project@mail.com", "*************");
smtp.UseDefaultCredentials = true;
smtp.Credentials = NetworkCred;
smtp.Port = 25;
smtp.Send(mm);
Div1.Visible = true;
lblsuccess.Visible = true;
lblsuccess.Text = "Success";
lblsuccess.ForeColor = System.Drawing.Color.Green;
Div2.Visible = false;
Lblerror.Visible = false;
}
}
else
{
Div2.Visible = true;
Lblerror.Visible = true;
Lblerror.Text = "Please provide valid email address";
Lblerror.ForeColor = System.Drawing.Color.Black;
Div1.Visible = false;
lblsuccess.Visible = false;
}
}
Code for new user sign up
SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\Dataregister.mdf;Integrated Security = True");
protected void Page_Load(object sender, EventArgs e)
{
con.Open();
SqlCommand cmd = new SqlCommand();
cmd.CommandText = "SELECT Name FROM userTable WHERE Uid = '" + Request.QueryString["Id"] + "'";
cmd.Connection = con;
SqlDataAdapter sda = new SqlDataAdapter();
DataSet ds = new DataSet();
sda.SelectCommand = cmd;
sda.Fill(ds, "detail");
if (ds.Tables[0].Rows.Count > 0)
{
NameID.Text = ds.Tables[0].Rows[0]["Name"].ToString();
}
}
protected void Button1_Click(object sender, EventArgs e)
{
string invitedBy = GetInvitedBy(Convert.ToString(Request.QueryString["Id"]));
if (mailtxtbx.Text != "" & pass.Text != "" & conpass.Text != "")
{
if (check1.Checked)
{
using (SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\Dataregister.mdf;Integrated Security = True"))
{
using (SqlCommand cmd = new SqlCommand("INSERT INTO userTable (email, Name, pass, Role, CreatedBy, CreateDate, LastLogin) VALUES(@email,@Name,@pass,@Role,@CreatedBy,@CreateDate,@LastLogin)"))
{
using (SqlDataAdapter sda = new SqlDataAdapter())
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@email", mailtxtbx.Text.Trim());
cmd.Parameters.AddWithValue("@Name", NameID.Text.Trim());
cmd.Parameters.AddWithValue("@pass", pass.Text.Trim());
cmd.Parameters.AddWithValue("@Role", "User");
cmd.Parameters.AddWithValue("@CreatedBy", invitedBy);
cmd.Parameters.AddWithValue("@CreateDate", DateTime.Now);
cmd.Parameters.AddWithValue("@LastLogin", DateTime.Now);
cmd.Connection = con;
con.Open();
cmd.ExecuteNonQuery();
Div1.Visible = true;
dvMessage.Visible = false;
lblMessage.Visible = false;
}
con.Close();
}
}
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.Text = "Please Check Box";
Div1.Visible = false;
lblMessage.ForeColor = System.Drawing.Color.Red;
}
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.ForeColor = System.Drawing.Color.Red;
lblMessage.Text = "*All Fields Are Required*";
lblsuccess.Visible = false;
Div1.Visible = false;
}
}
private string GetInvitedBy(string id)
{
string invitedBy = "";
using (SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\Dataregister.mdf;Integrated Security = True"))
{
using (SqlCommand cmd = new SqlCommand("SELECT email FROM userTable WHERE Uid = @Id"))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@Id", id);
cmd.Connection = con;
con.Open();
invitedBy = Convert.ToString(cmd.ExecuteScalar());
con.Close();
}
}
return invitedBy;
}
login code
protected void Button1_Click(object sender, EventArgs e)
{
dvMessage.Visible = false;
lblMessage.Visible = false;
if (!string.IsNullOrEmpty(txtUsername.Text) & !string.IsNullOrEmpty(txtPassword.Text))
{
SqlConnection con = new SqlConnection("Data Source=(LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|\\Dataregister.mdf;Integrated Security = True");
string check = "SELECT Uid FROM userTable WHERE pass = @pass COLLATE SQL_Latin1_General_CP1_CS_AS AND email = @email AND pass = @pass";
SqlCommand com = new SqlCommand(check, con);
con.Open();
com.Parameters.AddWithValue("@email", txtUsername.Text.Trim());
com.Parameters.AddWithValue("@pass", txtPassword.Text.Trim());
string Uid = Convert.ToString(com.ExecuteScalar());
con.Close();
if (!string.IsNullOrEmpty(Uid))
{
string users = "";
using (SqlCommand cmd = new SqlCommand("SELECT Uid FROM UserActivation WHERE Uid = @Uid"))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@Uid", Uid);
cmd.Connection = con;
con.Open();
users = Convert.ToString(cmd.ExecuteScalar());
con.Close();
}
if (string.IsNullOrEmpty(users))
{
int user = 0;
using (SqlCommand cmd = new SqlCommand("SELECT Uid FROM userTable WHERE pass = @pass COLLATE SQL_Latin1_General_CP1_CS_AS AND email = @email AND pass = @pass"))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@email", txtUsername.Text.Trim());
cmd.Parameters.AddWithValue("@pass", txtPassword.Text.Trim());
cmd.Connection = con;
con.Open();
user = Convert.ToInt32(cmd.ExecuteScalar());
con.Close();
}
if (user > 0)
{
Session["user"] = user;
con.Open();
string query = "SELECT LastLogin, IsActive from Users WHERE Uid = @Uid";
using (SqlCommand cmd = new SqlCommand(query, con))
{
cmd.Parameters.AddWithValue("@Uid", Session["user"]);
Session["LastLogin"] = Convert.ToDateTime(cmd.ExecuteScalar());
}
string UpdateLog = @"UPDATE Users SET LastLogin=@dateandtime, IsActive=@IsActive WHERE Uid = @Uid";
using (SqlCommand cmd = new SqlCommand(UpdateLog, con))
{
cmd.Parameters.AddWithValue("@dateandtime", DateTime.Now);
cmd.Parameters.AddWithValue("@IsActive", "1");
cmd.Parameters.AddWithValue("@Uid", Session["user"]);
cmd.ExecuteNonQuery();
}
con.Close();
}
Response.Redirect("dashboard.aspx");
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.ForeColor = System.Drawing.Color.Red;
lblMessage.Text = "Account has not been activated";
txtPassword.Text = "";
txtPassword.Focus();
}
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.ForeColor = System.Drawing.Color.Red;
lblMessage.Text = "Invalid Login Details";
txtPassword.Text = "";
txtPassword.Focus();
}
}
else
{
dvMessage.Visible = true;
lblMessage.Visible = true;
lblMessage.ForeColor = System.Drawing.Color.Red;
lblMessage.Text = "All Fields are Required";
}
}
ASP.NET
C#
C#
An object-oriented and type-safe programming language that has its roots in the C family of languages and includes support for component-oriented programming.
10,233 questions
{count} votes
-
AgaveJoe 26,191 Reputation points2022-12-01T15:05:26.217+00:00 Frankly, you need to rethink the logic which is overly complex.
The database schema is not properly nonmaize which is causing the complexity. Roles, password, and email address should not exist in the same table. Secondly, email addresses and usernames should be unique. Roles, on the other hand, can be assigned to many users; a one-to-many relationship. I believe if you make the email address and username unique then move the user roles to another table, the logic will simplify and you'll easily be able find unique user accounts in the system.
There are other issues with your logic but first normalizing to the 3rd form will simplify the logic greatly. Just do a Google search for "normalization rules"
https://www.studytonight.com/dbms/database-normalization.php
-
Donald Symmons 2,856 Reputation points
2022-12-01T15:47:39.333+00:00 I believe if you make the email address and username unique then move the user roles to another table, the logic will simplify and you'll easily be able find unique user accounts in the system.
I was thinking of a logic situation where I may have to help 3 different people on projects but using a single login detail. Which is why I am trying to do something of that nature. But you just told me about the anomalies that will occur in the database system.
However, may I ask you to please help me out here; an input will surely give me a direction. Can you give me a layout of o may have to achieve this?
You also mentioned having two tables, which means I will join tables. -
AgaveJoe 26,191 Reputation points
2022-12-01T20:01:08.863+00:00 I was thinking of a logic situation where I may have to help 3 different people on projects but using a single login detail.
This is usually handled by implementing an "impersonate account" feature. Like any application feature, come up with a flow, general design, then implement the feature in code.
For example, an admin wants to impersonate an account. The Admin goes to a page that allows admin to impersonate. The admin picks an account and clicks a button to start impersonating. When the admin is done impersonating, then they go back to the impersonation page and click a button to stop impersonating.
However, may I ask you to please help me out here; an input will surely give me a direction. Can you give me a layout of o may have to achieve this?
ASP.NET comes authentication/authorization APIs. The latest is Identity. The concept is well documented and the table schemas are defined so I'm not sure what you need help with exactly.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 46%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Albert Kallal 4,651 Reputation points2022-12-01T23:21:18.06+00:00 In all cases, you should not only be free to allow/have/enjoy multiple roles for ONE user, but you also want this wired up to IIS so you can say, here is a aspx page, and ONLY users that are members of the salesgroup can view those reports. And if done correctly, you NOT have to write one line of code.
You have consider that with web sites being around for a VERY long time, that these types of things long ago have been dealt with (so you don't have to!). And you most certainly should not have to write new code each time some sales group, admin group, or even say allowing a user to have multiple logons is possible? That is a a so called "security" group, or often a "role" group you belong to.
I as a general rule don't like the idea of having a user with the same email, but being a different logon. However, if you ALWAYS limit one email to be active, then the built in IIS authentication providers can handle this.
At the VERY basic issue here, is you want IIS do respect and use the security system. That way then to secure some page(s) to a particular group, then you can secure that web page with IIS - and not your code.
The basic layout (and even the default tables generated for authentication will thus often look like this:
So, the roles now allows you to add as many types of users as you wish:
eg:
Sign in to comment