>>SqlCommand sqlCommand = new SqlCommand();
>>                    sqlCommand.CommandText = sqlStatement;
>>                        
>>                    sqlCommand.CommandType = CommandType.Text;
>>
>>                    // Add the query parameters
>>                    sqlCommand.Parameters.Add("@CardNum", SqlDbType.Int).Value = CardNum;