รบกวนสอบถามเกี่ยวกับ Login ของ C# ขอรบกวนถามเกี่ยวกับ Login ของ C# คือตอนนี้ใช้ Login ของ C#

public partial class MasterPage : System.Web.UI.MasterPage
{
    SqlConnection Conn = new SqlConnection(WebConfigurationManager.ConnectionStrings["OfficeConnect"].ConnectionString);
    DataSet ds3 = new DataSet();
    string username, pwd;

    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            try
            {
                Label1.Text = Session["UserAthentication"].ToString();
                MenuUser1.Visible = true;
                MenuAdmin1.Visible = false;
                btn_Logout.Visible = true;
                Login1.Visible = false;
            }
            catch (Exception ex )
            {
                Session["UserAthentication"] = "";
                MenuUser1.Visible = false;
                MenuAdmin1.Visible = true;
                btn_Logout.Visible = false;
                Login1.Visible = true;
            }
        }
    }

    protected void LinkButton1_Click(object sender, EventArgs e)
    {
        Session.Abandon();
        Response.Redirect("../Default.aspx");
    }

    protected void Login1_Authenticate(object sender, AuthenticateEventArgs e)
    {
        username = Login1.UserName;
        pwd = Login1.Password;
        string sqlUser;
        sqlUser = "SELECT TB_HR_Emp.EMP_ID, TB_HR_Emp.EMP_TITLE, TB_HR_Emp.EMP_NAME, TB_USER.USER_NAME, TB_USER.USER_TYPE";
        sqlUser += " FROM TB_HR_Emp INNER JOIN";
        sqlUser += " TB_USER ON TB_HR_Emp.EMP_ID = TB_USER.EMP_ID";
        //sqlUser += " Basicdata ON Users.Titlename = Basicdata.Basicvalue";
        sqlUser += " WHERE (TB_USER.USER_NAME = @Username) AND (TB_USER.USER_PASSWORD = @Password)";
        SqlCommand cmd = new SqlCommand(sqlUser, Conn);
        cmd.Parameters.AddWithValue("@Username", username);
        cmd.Parameters.AddWithValue("@Password", pwd);
        string CurrentName;
        Conn.Open();
        CurrentName = System.Convert.ToString(cmd.ExecuteScalar());
        if (CurrentName != "")
        {
            e.Authenticated = true;
            sqlUser = "";
            sqlUser = "SELECT TB_HR_Emp.EMP_ID, TB_HR_Emp.EMP_TITLE, TB_HR_Emp.EMP_NAME, TB_USER.USER_NAME, TB_USER.USER_TYPE";
            sqlUser += " FROM TB_HR_Emp INNER JOIN";
            sqlUser += " TB_USER ON TB_HR_Emp.EMP_ID = TB_USER.EMP_ID";
            sqlUser += " WHERE (TB_USER.USER_NAME = N'" + username + "') AND (TB_USER.USER_PASSWORD = N'" + pwd + "')";
            SqlDataAdapter da = new SqlDataAdapter(sqlUser, Conn);
            da.Fill(ds3, "TB_HR_Emp");
            string Fullname = "ชื่อผู้ใช้งาน : " + ds3.Tables["TB_HR_Emp"].Rows[0]["EMP_TITLE"] + ds3.Tables["TB_HR_Emp"].Rows[0]["EMP_NAME"];
            Session["UserAthentication"] = Fullname;
            //Session.Timeout = 180;
            Session["User"] = username;
            //Session.Timeout = 180;
            // Session["Group"] = "2";
            //Session.Timeout = 180;
            Response.Redirect("../FromBrand.aspx");
        }
        else
        {
            e.Authenticated = false;
            Session["UserAthentication"] = "";
        }
        Conn.Close();
    }

    protected void LoginButton_Click(object sender, EventArgs e)
    {

    }
    protected void btn_Logout_Click(object sender, EventArgs e)
    {
        Session.Remove("UserAthentication");
        Response.Redirect("FormLocationDept.aspx");
    }
}