@model MvcMovie.Models.LogOnModel



@{

    ViewBag.Title = "Log On";

}



<h2>Log On</h2>

<p>

    Please enter your user name and password. @Html.ActionLink("Register", "Register") if you don't have an account.

</p>



<script src="@Url.Content("~/Scripts/jquery.validate.min.js")" type="text/javascript"></script>

<script src="@Url.Content("~/Scripts/jquery.validate.unobtrusive.min.js")" type="text/javascript"></script>



@Html.ValidationSummary(true, "Login was unsuccessful. Please correct the errors and try again.")



@using (Html.BeginForm()) {

    <div>

        <fieldset>

            <legend>Account Information</legend>



            <div class="editor-label">

                @Html.LabelFor(m => m.UserName)

            </div>

            <div class="editor-field">

                @Html.TextBoxFor(m => m.UserName)

                @Html.ValidationMessageFor(m => m.UserName)

            </div>



            <div class="editor-label">

                @Html.LabelFor(m => m.Password)

            </div>

            <div class="editor-field">

                @Html.PasswordFor(m => m.Password)

                @Html.ValidationMessageFor(m => m.Password)

            </div>



            <div class="editor-label">

                @Html.CheckBoxFor(m => m.RememberMe)

                @Html.LabelFor(m => m.RememberMe)

            </div>



            <p>

                <input type="submit" value="Log On" />

            </p>

        </fieldset>

    </div>

}

        [HttpPost]

        public ActionResult LogOn(LogOnModel model, string returnUrl)

        {

            if (ModelState.IsValid)

            {

                if (Membership.ValidateUser(model.UserName, model.Password))

                {

                    FormsAuthentication.SetAuthCookie(model.UserName, model.RememberMe);

                    if (Url.IsLocalUrl(returnUrl) && returnUrl.Length > 1 && returnUrl.StartsWith("/")

                        && !returnUrl.StartsWith("//") && !returnUrl.StartsWith("/\\"))

                    {

                        return Redirect(returnUrl);

                    } else

                    {

                        return RedirectToAction("Index", "Home");

                    }

                } else

                {

                    ModelState.AddModelError("", "The user name or password provided is incorrect.");

                }

            }



            // If we got this far, something failed, redisplay form

            return View(model);

        }