Case Sensitive?

Dear everyone,





I am doing Login webform (C# .NET web application) with SQL Server 2000.





The staff table is to store authenticated user info.





But when I test it, I found that the password can be case insensitive, i.e. 'A0001' should be correct password, but 'a0001' can allow login.





Could anyone tell me how to solve this problem??





Thanks you very much!!








private void btnLogin_Click(object sender, System.EventArgs e)


{


//instantiate SQL connection


SqlConnection sqlConnect = new SqlConnection(connectStg);


SqlCommand selectLogin = sqlConnect.CreateCommand();





selectLogin.CommandText = "SELECT sid, type from STAFF Where sid= '" + txtId.Text + "' and pwd= '" + txtPwd.Text + "' ";








//open connectin for execution


sqlConnect.Open();





//instantiate the SqlDataReader reader


SqlDataReader loginReader = selectLogin.ExecuteReader();





//try and catch SqlException error


try


{


if(loginReader.Read())


{





// check whether the user is the role of administrator or operator


// I use GetValue(1) i.e. type field from the above select statement // if "O' then go operator page, else go to administrator page.


if (loginReader.GetValue(1).ToString().ToUpper().Equals("O"))


{


Server.Transfer("//SMS/LoginUser/SuccessLoginOper.aspx");





}


else if (loginReader.GetValue(1).ToString().ToUpper().Equals("A"))


{


Server.Transfer("//SMS/LoginUser/SuccessLoginAdmin.aspx");


}





}





else


{


//clear content of textbox and display error message


txtId.Text="";


txtPwd.Text="";


lblLoginFail.Visible = true;


lblLoginFail.Text="Login Failed!<br>" + "Ensure that ID and Password are correct!";


}





}


catch (SqlException se)


{


if (se.Number == 17)


{


lblLoginFail.Visible = true;


lblLoginFail.Text = "Could not connect to the database";


}





else


{


lblLoginFail.Visible = true;


lblLoginFail.Text = se.Message;


}





}





//close SqlDataReader and SqlConnection


loginReader.Close();


sqlConnect.Close();