ASP.NET

	@username varchar(50),
	@dateStart varchar(50),
	@dateFinish varchar(50)
	
	
	
AS
	
	SELECT     time_worked
	FROM         tblTimeWorked
	WHERE     (user_username = @username) AND (date BETWEEN @dateStart AND @dateFinish)

private void DoTimeWorked()
   {
       try
       {
           string start = txtFromDate.Text;
           string end = txtToDate.Text;
           userService.SupportDS.tblUsersRow rw =  (userService.SupportDS.tblUsersRow)userWebservice.GetUsersByUsername(grdUsersPay.SelectedDataKey.Value.ToString()).Rows[0];
           string user = rw.user_username;
           int hours = 0;
           int min = 0;
           int sec = 0;
           string worked = "";

           ArrayList myArrayList = new ArrayList();

           DateTime dayViewed = Convert.ToDateTime(start);

           foreach (DataRow row in userWebservice.GetHoursWorked(user, start,end).Rows)
           {
               myArrayList.Add(row);

              dayViewed = dayViewed.AddDays(1);
              start = dayViewed.ToShortDateString();
           }


          //TimeSpan ts = new TimeSpan();

          //bool isTimeSpan = TimeSpan.TryParse(worked, out ts);

          //hours = hours + Convert.ToInt32(ts.Hours);
          //min = min + Convert.ToInt32(ts.Minutes);
          //sec = sec + Convert.ToInt32(ts.Seconds);
          //dayViewed = dayViewed.AddDays(1);
       }
       catch (Exception ex)
       {
           throw ex;
       }
   }

int intResult = 0;
       // string strPath = Server.MapPath(FileUpload1.FileName);
        string strPath = Server.MapPath(ConfigurationManager.AppSettings["FolderPath"])+"\\"+ FileUpload1.FileName;
        SqlConnection con = new SqlConnection("Server=localhost; Database= Employee; uid=sa;pwd=server");
        SqlCommand com = new SqlCommand("Insert into ImageStorage(User_Name,Country,Profile_picture)values(@User_Name,@Country,@Profile_picture)", con);

        com.Parameters.AddWithValue("@User_Name", TextBox1.Text);
        com.Parameters.AddWithValue("@Country", TextBox2.Text);
        com.Parameters.AddWithValue("@Profile_picture",strPath);
        con.Open();
        intResult = Convert.ToInt32(com.ExecuteNonQuery());

        if (intResult != 0)
        {
            FileUpload1.PostedFile.SaveAs(strPath);
            Response.Write("Record Inserted.");
        }