Just pass parameter as your user name and password to your store procedure..
and make store procedure like this...
select * from "tablename" where username = @usernam and password = @password
if this query return something or return any row then your user will valid else not valid...
call that procedure using your code and pass your text boxes value respectively and see the result of your procedure for validation