I need to retrieve memberID from the database. Can someone help me if the coding in bold can retrieve the memberID? Or i do not even need that coding at all?
try
{
string connectionString = ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString;
connection = new SqlConnection(connectionString);
connection.Open();
//prepare sql statements
string sql = "SELECT * from Member where emailaddress='" + emailaddress + "' And Password='" + password + "'";
Response.Write(sql);
command = new SqlCommand(sql, connection);
SqlDataAdapter da = new SqlDataAdapter(command);
DataTable dt = new DataTable();
da.Fill(dt);
if (dt.Rows.Count > 0)
{
/* add value to Session */
Session["emailaddress"] = emailaddress;
Session["MemberId"] = dt.Rows[0]["MemberID"].ToString();
validUser = true;
/* Logging Information to Logtable */
command = new SqlCommand("Insert into LoggedInUsers(EmailAddress,LoginTime) values(@EmailAddress,@LoginTime)", connection);
command.Parameters.Clear();
command.Parameters.AddWithValue("@EmailAddress", emailaddress);
command.Parameters.AddWithValue("@LoginTime", DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss"));
command.ExecuteNonQuery();
dataReader = command.ExecuteReader();
Label1.Text = "Invalid email address or password.";
connection.Close();
//if (dataReader.Read())
//{
//save emailaddress in session
Response.Write("valid user:" + emailaddress);
String SQL = "SELECT MemberID FROM Member where emailaddress = @EmailAddress";
command.Parameters.AddWithValue("@EmailAddress", emailaddress);
validUser = true;
//}
//else
//{
//}
connection.Close();
}
}
catch (Exception ex)
{
//Response.Write(ex.Message);
Label1.Text = ex.Message.ToString();
}
if (validUser)
{
if (UpdateOnlineStatus(emailaddress) == true)
{
Session.Add("emailaddress", emailaddress);
}
}
}