title: How to check user and password ?
body: <p>What is the best practice to check user by login and password? I know two ways, but could not choose most security and right way. </p>
  
  <ol>
  <li><p>Check in sql like <code>where login = @login and password = @password</code> with using stored procedure</p></li>
  <li><p>Firstly select user by login and after do password check in code. (C#)</p></li>
  </ol>
  
  <p>Also what is official standard to check password strength? </p>