>SqlConnection cnUsers = new SqlConnection("server=\\myserver;integrated security=true;database=shg"); >// Create command object >SqlCommand cmdUsers = new SqlCommand("USP_validateuser",cnUsers); >cmdUsers.CommandType = CommandType.StoredProcedure; >cmdUsers.Parameters.Add("@cUser_id",SqlDbType.Char,40); >cmdUsers.Parameters["@cUser_id"].Value = "sortiz"; >cmdUsers.Parameters.Add("@cPassword",SqlDbType.Char,40); >cmdUsers.Parameters["@cPassword"].Value = "gabriel"; >cmdUsers.Parameters.Add("@nCount",SqlDbType.Int); >cmdUsers.Parameters["@nCount"].Direction = ParameterDirection.Output; >cnUsers.Open(); >int iCount ; >cmdUsers.ExecuteNonQuery(); >iCount = (int)cmdUsers.Parameters["@nCount"].Value; >cnUsers.Close(); >return iCount; >>
> > >CREATE PROCEDURE USP_VALIDATEUSER @cUser_Id char(40),@cPassword char(40),@nCount int OUTPUT AS >SET @nCount =(SELECT COUNT(*) FROM Users WHERE cUser_Id =@cUser_Id AND cPassword = @cPassword) >RETURN > >GO > > >>