public static User GetUser(int? userID,string userName,string password)
        {
            using (SqlConnection cn = GetConnection())
            {
                using (SqlCommand cmd = GetSqlCommand("csp_GetUser", cn, true))
                {

                    SqlParameter paramUserID = new SqlParameter("@UserID", SqlDbType.Decimal) {Value = userID};
                    cmd.Parameters.Add(paramUserID);

                    SqlParameter paramUserName = new SqlParameter("@UserName", SqlDbType.NVarChar) {Value = userName};
                    cmd.Parameters.Add(paramUserName);

                    SqlParameter paramPassword = new SqlParameter("@Password", SqlDbType.NVarChar) {Value = password};
                    cmd.Parameters.Add(paramPassword);

                    User userInfo;
                    cn.Open();
                    using (SqlDataReader reader = cmd.ExecuteReader(CommandBehavior.CloseConnection))
                    {
                        try
                        {


                            userInfo = new User();
                            if (reader.HasRows)
                            {
                                while (reader.Read())
                                {
                                    userInfo.UserID = DbHelper.SafeGetDecimal(reader, "UserId");
                                    userInfo.UserName = DbHelper.SafeGetString(reader, "Username");
                                    userInfo.RoleName = DbHelper.SafeGetString(reader, "Rolename");
                                    userInfo.FullName = DbHelper.SafeGetString(reader, "FullName");
                                    userInfo.FirstName = DbHelper.SafeGetString(reader, "FirstName");
                                    userInfo.LastName = DbHelper.SafeGetString(reader, "LastName");
                                    userInfo.Email = DbHelper.SafeGetString(reader, "Email");
                                    userInfo.Password = EncryptionHelper.Decrypt(DbHelper.SafeGetString(reader, "Password"), true);
                                    //userInfo.Passwords = DbHelper.SafeGetString(reader, "Passwords");
                                    userInfo.Type = DbHelper.SafeGetString(reader, "Type");
                                    userInfo.Market = DbHelper.SafeGetString(reader, "Market");
                                    userInfo.Company = DbHelper.SafeGetString(reader, "Company");
                                    userInfo.Location = DbHelper.SafeGetString(reader, "Location");
                                    userInfo.PasswordQuestion = DbHelper.SafeGetString(reader, "PasswordQuestion");
                                    userInfo.PasswordAnswer = DbHelper.SafeGetString(reader, "PasswordAnswer");
                                    userInfo.IsLockedOut = DbHelper.SafeGetBool(reader, "IsLockedOut");
                                    userInfo.IsActive = DbHelper.SafeGetBool(reader, "IsActive");
                                    userInfo.IsApproved = DbHelper.SafeGetBool(reader, "IsApproved");
                                    userInfo.VerifyToken = DbHelper.SafeGetString(reader, "VerifyToken");
                                    userInfo.FailedPasswordAttemptWindowStart = DbHelper.SafeGetDateTime(reader, "FailedPasswordAttemptWindowStart");
                                    userInfo.FailedPasswordAnswerAttemptCount = DbHelper.SafeGetInt(reader, "FailedPasswordAnswerAttemptCount");
                                    userInfo.FailedPasswordAttemptCount = DbHelper.SafeGetInt(reader, "FailedPasswordAttemptCount");
                                    userInfo.FailedPasswordAnswerAttemptWindowStart = DbHelper.SafeGetDateTime(reader, "FailedPasswordAnswerAttemptWindowStart");
                                    userInfo.LastActivityDate = DbHelper.SafeGetDateTime(reader, "LastActivityDate");
                                    userInfo.IsOnLine = DbHelper.SafeGetBool(reader, "IsOnLine");
                                    userInfo.LastPasswordChangedDate = DbHelper.SafeGetDateTime(reader, "LastActivityDate");
                                    userInfo.LastLockedOutDate = DbHelper.SafeGetDateTime(reader, "LastLockedOutDate");
                                    userInfo.LastLoginDate = DbHelper.SafeGetDateTime(reader, "LastLoginDate");
                                    userInfo.CreatedById = DbHelper.SafeGetDecimal(reader, "CreatedById");
                                    userInfo.CreatedDate = DbHelper.SafeGetDateTime(reader, "CreatedDate");

                                }
                            }
                        }
                        catch (Exception ex)
                        {
                            EventLoggerHelper.Log(ex);
                            cn.Dispose();
                            throw ex;
                        }
                    }
                    return userInfo;
                }
            }
        }