ช่วยดูหน้า Login ให้หน่อยครับ คือจะให้ Admin ไปหน้านึงแล้ว User ไปหน้านึง

       protected void btnLogin_Click(object sender, EventArgs e)
        {

           strConnString = "Data Source=NEWPROGRAMMER;Initial Catalog=customer;Integrated Security=True";
          objConn = new SqlConnection();
          objConn.ConnectionString = strConnString;
          objConn.Open();
          int intNumRows = 0;
          strSQL = "SELECT * FROM register WHERE username = '" + this.txtUsername.Text + "' AND [password] = '" + this.txtPassword.Text + "' ";
          objCmd = new SqlCommand(strSQL, objConn);
          SqlDataAdapter dtAdapter = new SqlDataAdapter(objCmd);
dtAdapter.Fill(dt1);


          if (idt1.Rows.Count > 0)
          {
              Session["strUser"] = this.txtUsername.Text;
               if(dt1.Rows[0]["Rank "].ToString()=="1")
               {
                     Response.Redirect("Report.aspx");
               }
              else
               {
                      Response.Redirect("Main.aspx");
               }
          }
          else
          {
              this.pnlLogin.Visible = false;
              this.lblStatus.Visible = true;
              this.lblStatus.Text = "Username/Password is wrong.";
          }
           


            objConn.Close();
            objConn = null;
           
           
        }

strConnString = "Data Source=NEWPROGRAMMER;Initial Catalog=customer;Integrated Security=True";
objConn.ConnectionString = strConnString;
objConn.Open();

SqlDataAdapter dtAdapter;
DataTable dt = new DataTable();
strSQL = "SELECT * FROM member WHERE Username = '" + this.txtUsername.Text + "' AND [Password] = '" + this.txtPassword.Text + "' ";
dtAdapter = new SqlDataAdapter(strSQL, objConn);
dtAdapter.Fill(dt);

if (dt.Rows.Count > 0) {
	if (dt.Rows[0]["Status"] == "admin") {
		// Admin
	} else {
		// User
	}

} else {
	this.lblStatus.Text = "Username/Password is wrong.";
}

 strSQL = new StringBuilder();
            strSQL.Append("SELECT * FROM register");
            strSQL.Append("WHERE username = @sUsername");
            strSQL.Append("AND password = '" + EncMD5("@sPassword") +"'");
            objCmd = new SqlCommand(strSQL.ToString(), objConn);
            objCmd.Parameters.Add("@sUsername", SqlDbType.VarChar).Value = this.txtUsername.Text;
            objCmd.Parameters.Add("@sPassword", SqlDbType.VarChar).Value =  EncMD5("'"+ this.txtPassword.Text+ "'");


            dtAdapter = new SqlDataAdapter(objCmd);
            dtAdapter.SelectCommand = objCmd;
            dtAdapter.Fill(ds);

            dt = ds.Tables[0];

            if (dt.Rows.Count > 0)
            {
                Session["strUser"] = this.txtUsername.Text;

                if (dt.Rows[0]["rank"].ToString() == "1")
                {
                    Response.Redirect("Report.aspx");
                }
                else if (dt.Rows[0]["status"].ToString() == "1")
                {
                    Response.Redirect("Main.aspx");
                }
                else
                {
                    Response.Write("<Script language=javascript>alert('User Login ของคุณยังไม่ได้รับการ Approve จากผู้ดูแลระบบ')</Script>");
                }
            }
            else
            {
                this.pnlLogin.Visible = false;
                this.lblStatus.Visible = true;
                this.lblStatus.Text = "Username/Password is wrong.";
                Response.Write("<Script language=javascript>alert('ไม่พบข้อมูลบัญชีผู้ใช้ที')");
            }