ASP.NET Login control not redirecting - asp.net

Question

My login control isn't working as intended anymore. It pulls the username and password from a database and then redirects the user to Home.aspx. Redirecting sadly doesn't happen. It does add this to the end of the url, but nothing happens
ReturnUrl=%2fHome.aspx
This is the shortend ASP code
<asp:Login ID="Login1" runat="server" OnAuthenticate= "ValidateUser"
DestinationPageUrl="~/Home.aspx"> </asp:Login>
Plus .cs code
protected void ValidateUser(object sender, AuthenticateEventArgs e)
{
SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["DB_CONNE"].ConnectionString);
con.Open();
SqlCommand cmd = new SqlCommand("SELECT * FROM Users WHERE Username =#Username and Password=#Password", con);
cmd.Parameters.AddWithValue("#Username", Login1.UserName);
cmd.Parameters.AddWithValue("#Wachtwoord", Login1.Password);
SqlDataAdapter da = new SqlDataAdapter(cmd);
DataTable dt = new DataTable();
da.Fill(dt);
Session["Uname"] = Login1.UserName;
if (dt.Rows.Count > 0)
{
Response.Redirect("Home.aspx");
}
I have been working on functionality in which not logged in users cant acces certain pages, but I'm not sure if that's the thing that's screwing it up..
After fiddling a little I noticed deny users seems to have an effect on it, but don't know any other way to be redirecting non-login attempts.
Any help would be greatly appreciated!

Answer 1

Looking at your code, in sql command your query have password parameter defined as #Password while adding it to the cmd parameters collection you have #Wachtwoord instead of the #Password.
Here is the updated code:
SqlCommand cmd = new SqlCommand("SELECT * FROM Users WHERE Username =#Username and Password=#Password", con);
cmd.Parameters.AddWithValue("#Username", Login1.UserName);
cmd.Parameters.AddWithValue("#Password", Login1.Password);
Also, instead of always redirecting to Home.aspx you can get the return url using FormsAuthentication.GetRedirectUrl. So if you try to access some page Protected.aspx without logging in the user will be redirected to Login.aspx?ReturnUrl=protected.aspx and after login user will be redirected to Protected.aspx page.
if (dt.Rows.Count > 0)
{
Response.Redirect(FormsAuthentication.GetRedirectUrl( Login1.UserName, false));
}