public bool RegisterUser(RegisterModel newUser)
{
try
{
using (SqlConnection conn = new SqlConnection(connectionString))
{
conn.Open();
SqlCommand regUser = new SqlCommand($"INSERT INTO appUser(email, password, name, userType, salt) VALUES(@email, @password, @name, @userType, @salt);", conn);
KeyValuePair <string, string> saltAndHash = RegisterModel.HashPassword(newUser.Password, 8, workFactor);
regUser.Parameters.AddWithValue("@email", newUser.Email);
regUser.Parameters.AddWithValue("@password", saltAndHash.Value);
regUser.Parameters.AddWithValue("@name", newUser.Name);
regUser.Parameters.AddWithValue("@userType", "r");
regUser.Parameters.AddWithValue("@salt", saltAndHash.Key);
int result = regUser.ExecuteNonQuery();
if (result > 0)
{
return(true);
}
}
}
catch (SqlException ex)
{
throw;
}
return(false);
}
