Database

CREATE PROCEDURE Login (
  @username varchar(50),
  @password varchar(50),
  @customerid int OUTPUT)
AS
BEGIN
  --Grab the unique customer ID.
  SELECT @customerid = customerid FROM tblcustomer
    WHERE username = @username AND password = @password

  --If the customer ID is valid then record login time.
  IF @@customerid  > 0
  BEGIN
    INSERT INTO tblLogin (customerid, logindate)
        VALUES(@customerid, CURRENT_TIMESTAMP)
    RETURN 1
  END

  --If we got here then invalid ID/password passed-in.
  RETURN -1
END

ocm = New SqlClient.SqlCommand("Login", SqlConnection1)
ocm.CommandType = CommandType.StoredProcedure
<br> <br>
'Input parameters @Username and @Password ...
pusername = ocm.Parameters.Add("@Username", SqlDbType.VarChar, 50)
pusername.Value = username
ppassword = ocm.Parameters.Add("@Password", SqlDbType.VarChar, 50)
ppassword.Value = password
<br> <br>
'Output parameter @CustomerID ...
pcustomerid = ocm.Parameters.Add("@customerid", SqlDbType.VarChar, 50)
pcustomerid.Direction = SQLClient.ParameterDirection.Output
<br> <br>
'Return value ...
preturnvalue = ocm.Parameters.Add("@ReturnValue", SqlDbType.Int)
preturnvalue.Direction = SQLClient.ParameterDirection.ReturnValue
<br> <br>
'Execute command (note that no data is returned)...
ocn.ExecuteNoQuery()
<br> <br>
'Check the outcome (I used ToString to avoid explicit casting) ...
if preturnvalue.Value.ToString() = "1" then
   customerid = pcustomerid.Value.ToString()
end if