daria

public bool ValidateUser(string Username, string Password)
        {
            bool result = false;

            Connection connectionString = new Connection();

            using (SqlConnection connection = new SqlConnection(connectionString.ConnectionString))
            {
                using (SqlCommand command = new SqlCommand())
                {
                    connection.Open();

                    command.Connection = connection;
                    command.CommandType = CommandType.Text;
                    command.CommandText = @"if exists (select EmployeeName, Password from Employee
                                            where EmployeeName = @Name AND Password = @Password)
                                            select 1;
                                            else
                                            select 0;";

                    command.Parameters.Add("@Name", SqlDbType.NVarChar, 50).Value = Username;
                    command.Parameters.Add("@Password", SqlDbType.NVarChar, 8).Value = Password;

                    result = Convert.ToBoolean(command.ExecuteScalar());

                    connection.Close();
                }
            }

            return result;
        }

    }
}