突然用参数值，不知道怎么写登陆代码了。。。

[smartcoach]

第一次用参数写登陆代码。。。
首先是DAL层：

  public bool Login(UserModel um)
         {
             bool flag = false;
             string sql = "select * from User where UserName=@username";
             SqlParameter[] paras = new SqlParameter[]{
              new SqlParameter("username",um.UserName),
              new SqlParameter("userpwd",um.UserPwd),
              new SqlParameter("departmentname",um.DepartMentName)
             };
             int res = sqlhelper.CheckLogin(sql,paras,CommandType.Text);
             if (res > 0)
             {
                 flag = true;
             }
             return flag;
         }

怎么写sqlhelper.CheckLogin这个方法完成登录呢，要对密码和DepartMentName都要验证的过程。。。一用参数就不会做了。。。拜托各位了

[bdmh]

你就一个@username参数，你搞那么多 SqlParameter 干嘛

[smartcoach]

少写了，是想对密码和departmentname都进行验证啊，就是登陆的时候这三者都验证啊[Quote=引用 1 楼 的回复:]
你就一个@username参数，你搞那么多 SqlParameter 干嘛
[/Quote]

[ChinaXtHuLang]

  public bool Login(UserModel um)
         {
             bool flag = false;
             string sql = "select * from User where UserName=@username And userpwd=@userpwd And departmentname=@departmentname";
             SqlParameter[] paras = new SqlParameter[]{
              new SqlParameter("@username",um.UserName),
              new SqlParameter("@userpwd",um.UserPwd),
              new SqlParameter("@departmentname",um.DepartMentName)
             };
             int res = sqlhelper.CheckLogin(sql,paras,CommandType.Text);
             if (res > 0)
             {
                 flag = true;
             }
             return flag;
         }

[smartcoach]

请问sqlhelper.CheckLogin这个方法怎么写啊？[Quote=引用 3 楼 的回复:]
C# code
public bool Login(UserModel um)
{
bool flag = false;
string sql = "select * from User where UserName=@username And userpwd=@userpwd And departmentname=……
[/Quote]

[暗尘掩月]

你的sqlhelper 没有执行带参数的sql 语句方法么

[smartcoach]

其实我是想问sqlhepler中关于登陆的这样整代码怎么写，像已经传入三个参数了string sql = "select * from User where UserName=@username And userpwd=@userpwd And departmentname=@departmentname";
验证对这三个参数都验证的代码要怎么写呢？[Quote=引用 3 楼 的回复:]
C# code
public bool Login(UserModel um)
{
bool flag = false;
string sql = "select * from User where UserName=@username And userpwd=@userpwd And departmentname=……
[/Quote]

[fjsnail]

string sql = "select * from User where UserName=@username";
sql=sql.replace("@username",name);

[无爱大叔]

public static string loginMessage=string.Empty;
public bool Login(UserModel um)
{
bool flag = false;
string sql = "select * from User where UserName=@username and departmentname=@departmentname";
SqlParameter[] paras = new SqlParameter[]{
new SqlParameter("username",um.UserName),
//new SqlParameter("userpwd",um.UserPwd),
new SqlParameter("departmentname",um.DepartMentName)
};
//int res = sqlhelper.CheckLogin(sql,paras,CommandType.Text);
DataSet ds = sqlhelper.ExcuteDataSet(sql,paras,CommandType.Text);
if(ds.Tables[0].Rows.Count>0)
{
if(ds.Tables[0].Rows[0]["userpwd"].ToString()==um.UserPwd)
{
flag=true;
}
else
{
loginMessage="登录失败，用户密码不正确！";
}
}
else
{
loginMessage="登录失败，无此用户信息！";
}
return flag;
}
伪代码，你自己写剩下的吧