Just for future reference....
You should check the input (in textBox1 ) is a valid ID prior to calling the DB.
You should always check the exact number of rows returned, if rows returned is not 1 then login is unsuccessful.
If I entered into the textbox "12345 or 1=1" would I get logged in?
Your main Oracle code is in the 'finally' block.
This is not good practice, the finally block should be used for clean-up only (closing the connection).
Your code risks throwing an exception in the 'finally' and leaving DB connections open.
