var authResult = new DataTable();
            using (var sqlConnection = new SqlConnection(connectionString))
            {
                sqlConnection.Open();

                using (var sqlCommand = new SqlCommand("SELECT * FROM Users WHERE Username = @user", sqlConnection))
                {
                    sqlCommand.Parameters.Add("@user", SqlDbType.VarChar).Value = user.ToLower();

                    using (var sqlReader = sqlCommand.ExecuteReader())
                    {
                        authResult.Load(sqlReader);
                    }
                }

            }

            if (authResult.Rows.Count == 0) return; //Username Didn't Exist

            //Username did Exist!
            var dbPassword = authResult.Rows[0]["Password"].ToString();

            if (string.CompareOrdinal(dbPassword, pass) != 0) return; //WRONG PASSWORD

            var dbId = Convert.ToInt32(authResult.Rows[0]["ID"]);

            //Region, Server, charName, charCopper, guildName, guildCopper
            const string commandText =
                "IF EXISTS (Select ID FROM Data WHERE ID = @id)" +
                "   UPDATE Data" +
                "   SET Region = @region, Server = @server, charName = @charname, charCopper = @charcopper, guildName = @guildname, guildCopper = @guildcopper" +
                "   WHERE ID = @id" +
                "ELSE" +
                "   INSERT INTO Data (ID, Region, Server, charName, charCopper, guildName, guildCopper)" +
                "   VALUES (@id, @region, @server, @charname, @charcopper, @guildname, @guildcopper)";

            using (var sqlConnection = new SqlConnection(connectionString))
            {
                sqlConnection.Open();

                using (var sqlCommand = new SqlCommand(commandText))
                {
                    sqlCommand.Parameters.Add("@id", SqlDbType.Int).Value = dbId;
                    sqlCommand.Parameters.Add("@region", SqlDbType.VarChar).Value = region;
                    sqlCommand.Parameters.Add("@server", SqlDbType.VarChar).Value = server;
                    sqlCommand.Parameters.Add("@charname", SqlDbType.VarChar).Value = charName;
                    sqlCommand.Parameters.Add("@charcopper", SqlDbType.Int).Value = charCopper;
                    sqlCommand.Parameters.Add("@guildname", SqlDbType.VarChar).Value = guildName;
                    sqlCommand.Parameters.Add("@guildcopper", SqlDbType.Int).Value = guildCopper;

                    sqlCommand.ExecuteNonQuery();
                }
            }