User-1375742532 posted
I understand that I must use, parameter so it doesnt allow SQL injections. I then created a function, which give user, password information and connectionString. Has follow
private person GetUser(string user, string pass, string connectionString)
{
person retVal = new person(user, pass);
using (OleDbConnection connection = new OleDbConnection(connectionString))
{
OleDbCommand command = connection.CreateCommand();
command.CommandText = "SELECT * FROM Member WHERE UserID = @userName AND UserPassword = @passWord";
command.Parameters.AddWithValue("@userName",user);
command.Parameters.AddWithValue("@passWord",pass);
try
{
connection.Open();
OleDbDataReader reader = command.ExecuteReader();
if (reader.HasRows)
{
reader.Read();
retVal.Username = user;
retVal.Password = pass;
retVal.Mood = reader["userMood"].Value.ToString();
retVal.State = reader["userState"].Value.ToString();
}
reader.Close();
}
catch (Exception ex)
{
Messagebox.show(ex.Message);
}
}
return retVal;
}
And can is executed with the following method
person myPerson = GetUser(txtUser.Text, txtPass.Text, Properties.Settings.Default.ConnectionString);
if (!string.IsNullOrEmpty(myPerson.Username);
{
JessengerList ChatList = new JessengerList();
this.Visible = false;
ChatList.Show();
}
I believe this would work, however when creating myPerson object, it doesnt recognize the method username. I might be right or I might have a total finger in the eye! I am on the right path?
The person Class is has follow
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace Jessenger
{
class person
{
private static string username;
private static string password;
private static string mood;
private static int state;
/*
* State 1 = Online
* State 2 = Away
* State 3 = Busy
* State 4 = Offline
*/
public person(String _username, String _password)
{
username = _username.ToLower();
password = _password.ToLower();
}
public person(String _username, String _password, String _mood, int _state)
{
username = _username.ToLower();
password = _password.ToLower();
mood = _mood.ToLower();
state = _state;
}
public static String Username
{
get
{
return username;
}
set
{
username = value;
}
}
public static String Password
{
get
{
return password;
}
set
{
password = value;
}
}
public static String Mood
{
get
{
return mood;
}
set
{
mood = value;
}
}
public static int State
{
get
{
return state;
}
set
{
state = value;
}
}
private static string toString()
{
return "The username is: " + username + ", the password is: " + password + " the user is in state " + state + " and the mood is: " + mood;
}
}
}
