Advertisement
Guest User

Untitled

a guest
Sep 24th, 2017
57
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.65 KB | None | 0 0
  1. using (SqlConnection conn = new SqlConnection(sqlConString))
  2. {
  3. SqlCommand insertQuery = new SqlCommand("INSERT INTO user_table (Username, Password, Name, Surname, DOB) VALUES ( @0, @1, @2, @3, @4 )", conn);
  4.  
  5. insertQuery.Parameters["@0"].Value = edtUsername.Text;
  6. insertQuery.Parameters.AddWithValue("@1", edtPassword.Text);
  7. insertQuery.Parameters.AddWithValue("@2", edtName.Text);
  8. insertQuery.Parameters.AddWithValue("@3", edtSurname.Text);
  9. insertQuery.Parameters.AddWithValue("@4", dateTimePicker.Text);
  10.  
  11. conn.Open();
  12. insertQuery.ExecuteNonQuery();
  13. conn.Close();
  14. } // using conn
  15.  
  16. using (var conn = new SqlConnection(sqlConString))
  17. {
  18. using(var insertQuery = new SqlCommand("INSERT INTO user_table (Username, Password, Name, Surname, DOB) VALUES ( @Username, @Password, @Name, @Surname, @DOB)", conn))
  19. {
  20. // I'm assuming nvarchar as the data type, change it if needed....
  21. insertQuery.Parameters.Add("@Username", SqlDbType.NVarChar).Value = edtUsername.Text;
  22. // uniqueSalt can be stored as plain text in the database, but should be unique for each password.
  23. insertQuery.Parameters.Add("@Password", SqlDbType.NVarChar).Value = HashPassword(edtPassword.Text, uniqueSalt);
  24. insertQuery.Parameters.Add("@Name", SqlDbType.NVarChar).Value = edtName.Text;
  25. insertQuery.Parameters.Add("@Surname", SqlDbType.NVarChar).Value = edtSurname.Text;
  26. insertQuery.Parameters.Add("@DOB", SqlDbType.DateTime).Value = dateTimePicker.Value;
  27. conn.Open();
  28. insertQuery.ExecuteNonQuery();
  29. }
  30. }
  31.  
  32. string HashPassword(string password, string salt)
  33. {
  34. // TODO: Implement hashing with salt
  35. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement