public bool authUser(string username, string password)
{
SqlCeConnection con = new SqlCeConnection(@"Data Source=|DataDirectory|\Cobweb_Quiz.sdf");
SqlCeCommand cmd = new SqlCeCommand();
cmd.Connection = con;
SqlCeDataReader SQLReader;
cmd.CommandText = "SELECT * FROM users WHERE (username = @username)";
cmd.Parameters.AddWithValue("@username", username);
try
{
con.Open();
SQLReader = cmd.ExecuteReader();
if (SQLReader.Read())
{
encrypt en = new encrypt();
string dbpass = SQLReader[2].ToString();
string confirm = en.Decrypt(dbpass);
if (confirm == password)
{
return true;
}
else
{
return false;
}
}
else
{
return false;
}
}
catch (Exception ex)
{
//LOG?
throw ex;
}
finally
{
con.Close();
}
}
