//login public bool Login(Registar obj) { SqlConnection con = new SqlConnection(@"Data Source=BPDESILVA;Initial Catalog=StaffordUniversity;Persist Security Info=True;User ID=sa;Password=123456"); bool log = false; string query = "SELECT * FROM Registar where username ='******'"; SqlCommand cmd = new SqlCommand(query, con); con.Open(); try { SqlDataReader reader = cmd.ExecuteReader(); if (reader.Read()) { if (reader[2].Equals(obj.getPassword())) { log = true; } else { MessageBox.Show("Incorrect!"); } } else { MessageBox.Show("Incorrect!"); } } finally { con.Close(); } return(log); }
//add data public void addRegistar(Registar obj) { try { string sql = "INSERT INTO Registar (RId,Username,Password)values('2','" + obj.getUsername() + "','" + obj.getPassword() + "')"; SqlCommand cmd = new SqlCommand(sql, con); con.Open(); cmd.ExecuteNonQuery(); } finally { con.Close(); } }