.NET (Core and Framework)

Line 65:                 connection.Close(); //Closes DB connection<br />
Line 66: <br />
Line 67:                 int valid = cmdString.Parameters.Add ("?p_valid");<br />
Line 68: <br />
Line 69:                

//Builds .net mysql connection and passes connection string into method<br />
       MySqlConnection connection = new MySqlConnection (connectionString);<br />
       <br />
        //Create mySql command string for passing query or SPROC(Stored Procedure)<br />
        MySqlCommand cmdString = new MySqlCommand();<br />
      <br />
        //Set Command to equal mySql connection,t so can pass SQL query<br />
        cmdString.Connection = connection;<br />
 <br />
        //Set command string to equal SPROC<br />
        cmdString.CommandText = "login";<br />
        cmdString.CommandType = CommandType.StoredProcedure;<br />
<br />
       <br />
             MySqlParameter param ;<br />
            //Creats paramter to send to SPROC<br />
             param = cmdString.Parameters.Add("?p_username", MySqlDbType.VarChar);<br />
            //Sets parameter type to input parameter<br />
            param.Direction = ParameterDirection.Input;<br />
            //Sets parameter value to text box<br />
            param.Value = txtUsername.Text;<br />
<br />
            <br />
            //Creats paramter to send to SPROC<br />
            param = cmdString.Parameters.Add("?p_password", MySqlDbType.VarChar);<br />
            //Sets parameter type to input parameter<br />
            param.Direction = ParameterDirection.Input;<br />
            //Sets parameter value to text box<br />
            param.Value = txtPassword.Text;<br />
<br />
            //Creates parameter to be passed into procedure      <br />
            param = cmdString.Parameters.Add("?p_valid", MySqlDbType.Int32);<br />
            //Sets parameter direction to be equal to output<br />
            param.Direction = ParameterDirection.Output;<br />
       <br />
<br />
                connection.Open(); //Opens DB connection<br />
                cmdString.ExecuteNonQuery(); //Runs query<br />
                connection.Close(); //Closes DB connection<br />
<br />
                int valid = cmdString.Parameters.Add ("?p_valid");<br />
<br />
               <br />
<br />
        if (valid == 1)<br />
        {<br />
            Server.Transfer("test.aspx");<br />
        }<br />
        else if (valid==0)<br />
        {<br />
            msgbox("your login is not valid)");<br />
        }<br />
<br />
               <br />
    }<br />
<br />
    private void msgbox(string p)<br />
    {<br />
        throw new Exception("The method or operation is not implemented.");<br />
    }        <br />
  }