Thread: Login validating from a local and remote db

OK, back-story, I am only doing this the way I am because it is required by the boss... Here's what I'm doing:

I have a local SQL database that contains 6 employee numbers (these numbers indicate admins and setup managers), if someone logs into the program and is in this database, certain features become active. If they are not in this database, we look into an Oracle database with all employee numbers in order to ensure a proper employee number is logging in. Here is what I have:

Code:

private void button_Login_Click(object sender, EventArgs e)
        {
            SqlConnection con = new SqlConnection("Data Source=DAHLENO0744\\;Initial Catalog=USPCNew;Integrated Security=True;Pooling=False");
            try
            {
                con.Open();
            }
            catch (Exception)
            {
                MessageBox.Show("Data Connection Failed");
            }
            String liq = "SELECT * FROM Employee where EmpNum=@EmpNum";
            SqlCommand lli = new SqlCommand(liq, con);
            lli.Parameters.AddWithValue("@EmpNum", this.textBox1.Text);
            SqlDataReader dr1 = lli.ExecuteReader();
            while (dr1.Read())
            {
                if (dr1.HasRows == true)
                {
                    MessageBox.Show("Login Successful");
                    this.Hide();
                    MainForm ss = new MainForm();
                    ss.Show();
                    con.Close();
                }
            }
            if (dr1.HasRows == false)
            {
                con.Close();
                OdbcConnection con2 = new OdbcConnection("Driver={Microsoft ODBC for Oracle};Dsn=dahp;uid=admin;pwd=passw;server=dahp");
                try
                {
                    con2.Open();
                }
                catch (Exception)
                {
                    MessageBox.Show("Data Connection Failed");
                }
                OdbcCommand rli = con2.CreateCommand();
                rli.CommandText = "SELECT * FROM VWEMPLOYEE where EMPNUM=:EMPNUM";
                rli.Parameters.AddWithValue(":EMPNUM", this.textBox1.Text);
                OdbcDataReader dr2;
                dr2 = rli.ExecuteReader();
                while (dr2.Read())
                {
                    if (dr2.HasRows == true)
                    {
                        MessageBox.Show("Login Successful");
                        this.Hide();
                        MainForm ss = new MainForm();
                        ss.Show();
                        con2.Close();
                    }
                    if (dr2.HasRows == false)
                    {
                        MessageBox.Show("Please enter valid Employee Number");
                    }

                }
            }
            
        }

Any idea why this doesn't work?

So, I got it... here is the code, in case anyone needs to do this in the future

Code:

private void button_Login_Click(object sender, EventArgs e)
        {
            SqlConnection con = new SqlConnection("Data Source=DAHLENO0744\\;Initial Catalog=USPCNew;Integrated Security=True;Pooling=False");
            OdbcConnection con2 = new OdbcConnection("Driver={Microsoft ODBC for Oracle};Dsn=dahp;uid=admin;pwd=passw;server=dahp");
            try
            {
                con.Open();
            }
            catch (Exception)
            {
                MessageBox.Show("Data Connection Failed");
            }
            String liq = "SELECT * FROM Employee where EmpNum=@EmpNum";
            SqlCommand lli = new SqlCommand(liq, con);
            lli.Parameters.AddWithValue("@EmpNum", this.textBox1.Text);
            SqlDataReader dr1 = lli.ExecuteReader();
            while (dr1.Read())
            {
                if (dr1.HasRows == true)
                {
                    MessageBox.Show("Login Successful");
                    this.Hide();
                    MainForm ss = new MainForm();
                    ss.Show();
                    con.Close();
                }
            }
            if (dr1.HasRows == false)
            {
                con.Close();
                try
                {
                    con2.Open();
                }
                catch (Exception)
                {
                    MessageBox.Show("Data Connection Failed");
                }
                finally
                {
                    OdbcCommand rli = con2.CreateCommand();
                    rli.CommandText = "SELECT * FROM PLANT.VWEMPLOYEE where EMPNUM=EMPNUM";
                    rli.Parameters.AddWithValue("EMPNUM", this.textBox1.Text);
                    OdbcDataReader dr2;
                    dr2 = rli.ExecuteReader();
                    while (dr2.Read())
                    {
                        if (dr2.HasRows == true)
                        {
                            MessageBox.Show("Login Successful");
                            this.Hide();
                            MainForm ss = new MainForm();
                            ss.Show();
                            break;
                        }
                        else
                        {
                            MessageBox.Show("Please enter valid Employee Number");
                        }
                    }
                }
            }
            con2.Close();

OK, well, unfortunately, it allows anyone to log in. So this didn't really work... you can log in without an employee number at all