public DataSet ThongTinKhachHang(DTO_KhachHang khachhang)
{
DataSet result = new DataSet();
string sql = "SELECT * FROM KhachHang WHERE SoDienThoai = @SDT";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@SDT", khachhang.SDT),
};
DataAccess data = new DataAccess();
result = data.getdataset(sql, para);
return(result);
}
public DataSet KiemTraSDT(DTO_KhachHang dto)
{
DataSet result = new DataSet();
string sql = @"SELECT * FROM KhachHang WHERE SoDienThoai = @SDT";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@SDT", dto.SDT),
};
DataAccess data = new DataAccess();
result = data.getdataset(sql, para);
return(result);
}
public int DoiMatKhau(DTO_KhachHang dto)
{
int result = -1;
string sql = @"UPDATE KhachHang SET MatKhau =@MatKhau WHERE SoDienThoai =@SDT";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@MatKhau", dto.MatKhau),
new SqlParameter("@SDT", dto.SDT),
};
DataAccess data = new DataAccess();
result = data.Execute(sql, para);
return(result);
}
public DataSet KiemTraBaoMat(DTO_KhachHang dto)
{
DataSet result = new DataSet();
string sql = @"SELECT * FROM KhachHang WHERE SoDienThoai = @SDT AND CMND = @CMND AND CauHoiBaoMat = @CauHoiBaoMat AND TraLoi = @TraLoi";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@SDT", dto.SDT),
new SqlParameter("@CMND", dto.CMND),
new SqlParameter("CauHoiBaoMat", dto.CauHoiBiMat),
new SqlParameter("TraLoi", dto.TraLoi),
};
DataAccess data = new DataAccess();
result = data.getdataset(sql, para);
return(result);
}
public DataSet KT_SDT(DTO_KhachHang dto, ref string TenKH)
{
DataSet result = new DataSet();
string sql = @"SELECT * FROM KhachHang WHERE SoDienThoai = @SDT ";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@SDT", dto.SDT),
};
DataAccess data = new DataAccess();
result = data.getdataset(sql, para);
if (result.Tables.Count > 0 && result.Tables[0].Rows.Count > 0)
{
TenKH = result.Tables[0].Rows[0][1].ToString();
}
return(result);
}
public int DangKi(DTO_KhachHang dto)
{
int result = -1;
string sql = @"IF EXISTS (SELECT * FROM dbo.KhachHang WHERE SoDienThoai=@SDT AND MatKhau='')
UPDATE dbo.KhachHang SET MatKhau=@MatKhau, TenKhachHang=@TenKH, CMND=@CMND, CauHoiBaoMat=@CauHoiBaoMat, TraLoi=@TraLoi WHERE SoDienThoai=@SDT
ELSE INSERT INTO KhachHang VALUES (@SDT,@TenKH,@TichLuy,@MatKhau,@CMND,@CauHoiBaoMat,@TraLoi)";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@SDT", dto.SDT),
new SqlParameter("@TenKH", dto.TenKH),
new SqlParameter("@TichLuy", dto.TichLuy),
new SqlParameter("@MatKhau", dto.MatKhau),
new SqlParameter("@CMND", dto.CMND),
new SqlParameter("@CauHoiBaoMat", dto.CauHoiBiMat),
new SqlParameter("@TraLoi", dto.TraLoi),
};
DataAccess data = new DataAccess();
result = data.Execute(sql, para);
return(result);
}
