Private Sub btnLogIn_Click(...) Handles btnLogIn.Click
    Dim Password, InputPassword As String
    Dim Attempt As Integer
    Password = "enter"                                                     'initiialise variables
    Attempt = 0

   Do                                                                               'start of loop
        Attempt = Attempt + 1
        InputPassword = InputBox("Entr password. This is attempt " & "number                       " & Attempt)

    Loop Until (Attempt = 3) Or (InputPassword = Password) 'end of loop
    If InputPassword = Password Then
      MsgBox  ("This password is valid")
    Else
      MsgBox  ("This password is invalid")
    End If
End Sub

        Dim myReader As Data.SqlClient.SqlDataReader

        Dim mySqlConnection As Data.SqlClient.SqlConnection

        Dim mySqlCommand As Data.SqlClient.SqlCommand



        mySqlConnection = New Data.SqlClient.SqlConnection(ConfigurationManager.ConnectionStrings("svita076ConnectionString").ToString())

        Dim sql As String = "SELECT UserLogonID, UserPassword FROM MyUsers WHERE UserLogonID = '" & Me.userid.Text & "' AND Userpassword = '" & Me.psword.Text & "'"



        mySqlCommand = New Data.SqlClient.SqlCommand(sql, mySqlConnection)



        Try

            mySqlConnection.Open()

            myReader = mySqlCommand.ExecuteReader()



            If (myReader.HasRows) Then

                'Read in the first row to initialize the DataReader; we will on read the first row.

                myReader.Read()

                Dim content As ContentPlaceHolder

                content = Page.Master.FindControl("main")

                Dim lbl As New Label()

                lbl.Text = "<br/><br/>Logon Successful<br/>Welcome, " & myReader("UserFullName")


                content.Controls.Add(lbl)

            Else
                Dim content As ContentPlaceHolder

                content = Page.Master.FindControl("main")

                Dim lbl1 As New Label()

                lbl1.Text = "<br/><br/>Logon Failure<br/>Try Again"

                content.Controls.Add(lbl1)

            End If

        Catch ex As Exception

            Console.WriteLine(ex.ToString())

        Finally

            If Not (myReader Is Nothing) Then

                myReader.Close()

            End If

            If (mySqlConnection.State = Data.ConnectionState.Open) Then

                mySqlConnection.Close()

            End If

        End Try

Dim sql As String = "SELECT UserLogonID, UserPassword FROM MyUsers WHERE UserLogonID = '" & Me.userid.Text & "' AND Userpassword = '" & Me.psword.Text & "'"

SELECT Count(*) from MyUsers WHERE UserLogonID = '" & me.userid.Text & "' AND Userpassword = '" me.psword.Text & "'"

con.Open()
                Dim cmd As SqlCommand = New SqlCommand
                cmd.CommandText = "select count(*) from logins where userNames ='" & _
                me.userid.Text & "' and passwords = '" & hash & "'"
                cmd.Connection = con
                Dim i As String = cmd.ExecuteScalar

                If i = "0" Then
                    MsgBox("Unknown Username and/or Password")
                    txtUsername.Text = ""
                    txtOldPassword.Text = ""
                    txtNewPassword.Text = ""
                    txtRePassword.Text = ""
                Else

' Hash the password string and return it as a 32 character hex string
    Protected Friend Function getMd5Hash(ByVal input As String) As String

        Dim md5Hasher As New MD5CryptoServiceProvider()

        Dim data As Byte() = md5Hasher.ComputeHash(Encoding.Default.GetBytes(input))

        Dim sBuilder As New StringBuilder()

        For i As Integer = 0 To data.Length - 1

            sBuilder.Append(data(i).ToString("x2"))

        Next i

        Return sBuilder.ToString()

    End Function

dim source as string = salting + me.psword.Text
dim hash as string = getMd5Hash(source)