I am starting to learn ASP.NET, and I am designing a page for an admin to login and do some stuff. I have the username and password for the admin stored in Web.config (Is that a good practice?).Second thing, I am checking if the user filled the username and password fields, then I am checking if the values for the admin and password exist in the web.config, then I am checking if these values equal each other, so I am having 3 nested if. Is that a good practice as well?Here's my code: if (!string.IsNullOrEmpty(txtLoginId.Text) && !string.IsNullOrEmpty(txtPassword.Text))            {                string configLoginID = WebConfigurationManager.AppSettings[AdminLoginID];                string configPassword = WebConfigurationManager.AppSettings[AdminPassword];                if (!string.IsNullOrEmpty(configLoginID) && !string.IsNullOrEmpty(configPassword))                {                    if (txtLoginId.Text == configLoginID && txtPassword.Text == configPassword)                    {                        Session[ShoppingAdmin] = ShoppingAdmin;                        Response.Redirect(~/Admin/AddNewProducts.aspx);                    }                    else                    {                        lblAlert.Text = Incorrect Username/Password;                    }                }            }            else            {                lblAlert.Text = Please enter a usernamd and password;            }Last thing, checking empty fields using !string.IsNullOrEmpty for each field, is that the right thing to do?I would like to write a clean code, thanks for helping me with these 3 cases.
Login page code enhancement
c#;beginner;.net;asp.net;authentication