ASP.NET

'''''''   
'  a  '
'  b  '
'  c  '
'  d  '
'  e  '    
'  f  '               
'  g  '               
'  h  '              
'''''''

''''''''''''''''''
'a b c d e f g h '
''''''''''''''''''

SqlCommand cmd = new SqlCommand("sp_ValidateUser", conn);
        cmd.CommandType = System.Data.CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@varUserName", UserName);
        cmd.Parameters.AddWithValue("@varUserPwd", Password);
        cmd.Parameters.AddWithValue("@varCaseNumber", this.txtBoxCaseNumber.Text);

        SqlParameter outputParam = new SqlParameter("@varISValid", SqlDbType.SmallInt);
        outputParam.Direction = ParameterDirection.Output;
        cmd.Parameters.Add(outputParam);
          
        SqlDataReader Dr;

        Dr = cmd.ExecuteReader();

        while (Dr.Read())
        {

            if ((UserName == Dr["UserName"].ToString()) & (Password == Dr["UserPwd"].ToString()))
            {
                boolReturnValue = true;
            }

            Dr.Close();

            return boolReturnValue;
        }

        return boolReturnValue;

    }