hacmebank solve 1

DataFactory.cs

		public static int ValidateUserPassword(string loginID,string password)
		{
            // NEW code:
            Global.createSqlServerConnection();
            Global.globalSqlServerConnection.Open();
            SqlCommand sqlcmd = new SqlCommand(null, Global.globalSqlServerConnection);
            sqlcmd.CommandText = "select user_id from fsb_users where login_id=@loginid and password=@password";
            SqlParameter sql_login = new SqlParameter("@loginid", System.Data.SqlDbType.NVarChar, 100);
            SqlParameter sql_password = new SqlParameter("@password", System.Data.SqlDbType.NVarChar, 100);
            sql_login.Value = loginID;
            sql_password.Value = password;

            sqlcmd.Parameters.Add(sql_login);
            sqlcmd.Parameters.Add(sql_password);

            SqlDataReader result = sqlcmd.ExecuteReader();
            

            Object queryObject = null;
            if (result.Read())
            {
                object firstFieldFromFirstRow = (object)result[0];
                queryObject = result[0];
            }

            Global.globalSqlServerConnection.Close();

            // OLD code:
            // string sqlQuery = "select user_id from  fsb_users where login_id = '" + loginID+ "' and password = '" + password + "'";
            // object queryResult = SqlServerEngine.returnObjectFromSQLQuery_containing_FirstFieldFromFirstRow(sqlQuery);
            if (null != queryObject)
			{
				return (int)(decimal)queryObject;
			}					
			else
			{
				return 0;		
			}
		}