public void buyStocks(string companyID,int noOfShares)
    {
        string username = Session["username"].ToString();
        string mySelectQuery = "select userid from users where username=" + username;
        string mySelectQuery2 = "select stockleft from companyname where cid ="+companyID;
        OracleConnection myConnection = new OracleConnection("Data source = oracle.cise.ufl.edu/orcl; User ID =aniruddh; Password =Ama3010$");
        OracleCommand myCommand2 = new OracleCommand(mySelectQuery, myConnection);
        myCommand2.Connection.Open();
        OracleDataReader myReader2 = myCommand2.ExecuteReader(CommandBehavior.CloseConnection);
        OracleDataAdapter sda2 = new OracleDataAdapter(myCommand2);
        DataTable dt2 = new DataTable();
        sda2.Fill(dt2);
        int userid = Int32.Parse(dt2.Rows[0][0].ToString());
        myReader2.Close();
        myConnection.Close();

        myConnection.Open();
        OracleCommand myCommand4 = new OracleCommand(mySelectQuery2, myConnection);
        myCommand4.Connection.Open();
        OracleDataReader myReader4 = myCommand2.ExecuteReader(CommandBehavior.CloseConnection);
        OracleDataAdapter sda3 = new OracleDataAdapter(myCommand4);
        DataTable dt4 = new DataTable();
        sda2.Fill(dt4);
        int noOfStocksLeftBefore = Int32.Parse(dt4.Rows[0][0].ToString());
        myReader4.Close();
        myConnection.Close();

        OracleConnection connection = new OracleConnection();
        OracleCommand myCommand3 = new OracleCommand("buyingstock",connection);
        myCommand3.CommandType = CommandType.StoredProcedure;
        OracleParameter inval = new OracleParameter("userid", OracleDbType.Int32);
        inval.Direction = ParameterDirection.Input;
        inval.Value = userid;
        myCommand3.Parameters.Add(inval);
        OracleParameter inval2 = new OracleParameter("buycompanyid", OracleDbType.Int32);
        inval2.Direction = ParameterDirection.Input;
        inval2.Value = companyID;
        myCommand3.Parameters.Add(inval2);
        OracleParameter inval3 = new OracleParameter("volumebuy", OracleDbType.Int32);
        inval3.Direction = ParameterDirection.Input;
        inval3.Value = noOfShares;
        myCommand3.Parameters.Add(inval3);
        OracleDataAdapter da = new OracleDataAdapter(myCommand3);
        myCommand3.ExecuteNonQuery();


        myConnection.Open();
        OracleCommand myCommand5 = new OracleCommand(mySelectQuery2, myConnection);
        myCommand4.Connection.Open();
        OracleDataReader myReader5 = myCommand5.ExecuteReader(CommandBehavior.CloseConnection);
        OracleDataAdapter sda5 = new OracleDataAdapter(myCommand5);
        DataTable dt5 = new DataTable();
        sda2.Fill(dt4);
        int noOfStocksLeftAfter = Int32.Parse(dt4.Rows[0][0].ToString());
        myReader4.Close();
        myConnection.Close();
        if (noOfStocksLeftBefore-noOfStocksLeftAfter==noOfShares)
        {
            //Label1.Text="The Transaction was successful!";
        }
        else
        {
            //Label1.Text="The Transaction failed!";
        }

    }