SQL Select parameter

See more:

VB

SQL

selection

Parameter

Hi I'm new to vb.net.I'm having error input string is not in the correct format. I already used different codes for adding a parameter in sql select query.

I would like to ask what is the best way of adding a parameter in a VB.net select query?

Thanks in advance.

Dim strsql As String = "Select * from [users] where [userid]=@uid and [password]=@pword"


SQLCOn = New SqlConnection(Constring)

        Try
            SQLCOn.Open()
            Dim cmd As New SqlCommand(strsql, SQLCOn)

            1 cmd.Parameters.AddWithValue("@uid", UsernameTextBox.Text)
              cmd.Parameters.AddWithValue("@pword", PasswordTextBox.Text)


            2 cmd.Parameters.Add(New SqlParameter("@uid", UsernameTextBox.Text))
              cmd.Parameters.Add(New SqlParameter("@pword", PasswordTextBox.Text))

            3 cmd.Parameters.Add("@uid", SqlDbType.VarChar).Value = UsernameTextBox.Text
              cmd.Parameters.Add("@pword", SqlDbType.VarChar).Value = PasswordTextBox.Text


            4 cmd.Parameters("@uid").Value = UsernameTextBox.Text
              cmd.Parameters("@pword").Value = PasswordTextBox.Text

            'count = Convert.ToInt32(cmd.ExecuteScalar())

            If Convert.ToInt32(cmd.ExecuteScalar()) >= 1 Then
                MsgBox("Login success", vbInformation)
                Me.Hide()
            Else
                MsgBox("Invalid login", vbExclamation)
            End If

        Catch ex As Exception
            MsgBox(ex.ToString, vbExclamation)
        End Try