This post originated from an RSS feed registered with PHP Buzz by Alan Knowles. Original Post: fighting C# just to do simple things. Feed Title: Smoking toooo much PHP Feed URL: http://www.akbkhome.com/blog.php/RSS.xml Feed Description: More than just a blog :) Latest PHP Buzz Posts Latest PHP Buzz Posts by Alan Knowles Latest Posts From Smoking toooo much PHP

$tbl = DBDO::factory('mydb','user');

if (!$tbl->get('username', $_POST['username']) ||

    !($tbl->password == md5($_POST['password'])) {

      return false; // access denied....

}

$log = DBDO::factory('mydb','activity');

$log->user_id = $tbl->id;

$log->at_time = date('Y-m-d H:i:s');

$log->insert();

SqlCommand dbcmd = new SqlCommand(

            "SELECT * FROM user_details_basic WHERE " + 

            "username = @username"

            ,dbcon);
 

        SqlParameter param = new  SqlParameter("@username",  
		SqlDbType.VarChar     );
        param.Value = Request.params['username'];

        dbcmd.Parameters.Add(param);

        ArrayList user = getResults(dbcmd); // This is a 40 line method!

        if (user.Count < 1) {

            closeDB();

            return 0; // not found..

        }
        // as I said before (md5 is a 10 line method)

        if (0 != String.Compare((String) qmd5(password) , 
			(String) ((Hashtable) user[0])["password"])) {

            closeDB();

            return 0;

        }

.....

  SqlCommand dbcmd = new SqlCommand(

                 "INSERT INTO activity " + 

                "   ( user_id,   at_time   )" +

                " VALUES ( @user_id , GETDATE() )",dbcon); 

        param = new SqlParameter("@user_id", SqlDbType.Int);

        param.Value = (int) ((Hashtable) user[0])["id"])

        dbcmd.Parameters.Add(param);

        // imagine this code with quite a few more parameters.

        reader = dbcmd.ExecuteReader();