// stored procedure 를 사용하지 않은 코딩... 효율이 떨어지나 테스트 용으로..
/*
String SQLQuery = "SELECT userid, pwd, email FROM LoginInfo";
SqlCommand command = new SqlCommand(SQLQuery, Con);
SqlDataReader dr;
Con.Open();
dr = command.ExecuteReader();
while (dr.Read())
{
while(username == dr["userid"].ToString() && (password == dr["pwd"].ToString()))
{
typedSession typedsession = new typedSession(username, password, dr["email"].ToString());
Session["session"] = typedsession;
dr.Close();
return true;
}
}
dr.Close();
return false;
*/
*****************************************************************************************************************
/*
string sp = "UP_SELECT_LOGININFO_TEST1";
Cmd = new SqlCommand(sp, Con);
Cmd.CommandType = CommandType.StoredProcedure;
Cmd.Parameters.Add("@userid", SqlDbType.VarChar, 20);
Cmd.Parameters.Add("@pwd", SqlDbType.VarChar, 20);
Cmd.Parameters["@userid"].<wbr />Value = username;
Cmd.Parameters["@pwd"].Value = password;
try
{
SqlDataReader dr;
Con.Open();
dr = Cmd.ExecuteReader();
if(dr.Read())
{
if(username == dr["userid"].ToString() && (password == dr["pwd"].ToString()))
{
typedSession typedsession = new typedSession(username, password, dr["email"].ToString());
Session["session"] = typedsession;
dr.Close();
return true;
}
}
Con.Close();
Response.Redirect("list.aspx")<wbr />;
}
catch (Exception ex)
{
//lblText.Text = "ERROR : " + ex.Source + " - " + ex.Message;
//lblText.Visible = true;
return false;
}
return false;
*/
CREATE PROC UP_SELECT_LOGININFO_TEST1
@userid varchar(20) = '%',
@pwd varchar(20) = '%',
@returnid varchar(20) OUTPUT,
@returnpwd varchar(20) OUTPUT,
@returnemail varchar(100) OUTPUT
AS
SELECT @returnid = userid, @returnpwd = pwd, @returnemail = email
FROM LoginInfo
where userid LIKE @userid AND pwd LIKE @pwd
go