Syntax Error While Implementing Forms Auth

Hi All:

Need quick help guyz. I am implementing Forms Authentication on my website below is the code for the same... However  I am getting the following error ....

Line 1: Incorrect syntax near 'SQLSTR'. at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream) at System.Data.SqlClient.SqlCommand.ExecuteReader() at GreyHounds.Login.btnLogin_Click(Object sender, EventArgs e) in c:inetpubwwwrootGreyHoundsLogin.aspx.vb:line 49  Private Sub btnLogin_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles btnLogin.Click

Dim con As New SqlConnection("server=localhost; initial catalog=Grey Hounds; integrated security=SSPI")Dim SQLSTR As String = "Select * from Emp_Login"

Dim cmd As New SqlCommand("SQLSTR", con)Dim p1 As New SqlParameter("@EmpId", SqlDbType.VarChar)Dim p2 As New SqlParameter("@Password", SqlDbType.VarChar)

p1.SqlDbType = SqlDbType.VarChar

p1.Value = txtEmpID.Text

p2.SqlDbType = SqlDbType.VarChar

p2.Value = txtPass.Text

cmd.CommandType = CommandType.Text

cmd.Parameters.Add(p1)

cmd.Parameters.Add(p2)

Try

con.Open()Dim dr As SqlDataReader = cmd.ExecuteReader()

If Not txtEmpID.Text.Equals("") Or txtPass.Text.Equals("") Then

If dr.Item("Emp_Login") = p1.Value And dr.Item("Password") = p2.Value ThenFormsAuthentication.RedirectFromLoginPage(txtEmpID.Text, True)

Response.Redirect("http://localhost/greyhounds/Default.aspx")

Session("Emp_ID") = p1.Value

End If

Else

lblMessage.Text = "Invalid Credentials!Please try again"

End If

lblMessage.Text = "Cannot leave the boxes empty! Please enter the values"Catch ex As SqlException

Response.Write("<b>" & ex.Message & ex.HelpLink & "</b>")

Response.Write(ex.StackTrace)Catch ex1 As Exception

Response.Write(ex1.Message & ex1.Source & ex1.HelpLink)

Finally

con.Close()End Try

End Sub

 

Your quick help is highly appreciated...

Thanks!

Brandy