private void cmdLogin_Click(object sender, System.EventArgs e) {

    string strCnx = 

        ConfigurationSettings.AppSettings["cnxNWindBetter"];

    using (SqlConnection cnx = new SqlConnection(strCnx))

    {

        SqlParameter prm;

        cnx.Open();

        string strAccessLevel;

        SqlCommand cmd = new SqlCommand("procVerifyUser", cnx);

        cmd.CommandType= CommandType.StoredProcedure;

        prm = new SqlParameter("@username",SqlDbType.VarChar,50);

        prm.Direction=ParameterDirection.Input;

        prm.Value = txtUser.Text;

        cmd.Parameters.Add(prm);

        prm = new SqlParameter("@password",SqlDbType.VarChar,50);

        prm.Direction=ParameterDirection.Input;

        prm.Value = txtPassword.Text;

        cmd.Parameters.Add(prm);            

        strAccessLevel = (string) cmd.ExecuteScalar();

        if (strAccessLevel.Length>0) {

            FormsAuthentication.RedirectFromLoginPage(txtUser.Text, false);

        }

        else {

            lblMsg.Text = "Login attempt failed.";

        }

    }

}