title: Using Prepared Statement in C# with Mysql
body: <p>I tried prepared statement in my program, but not working.</p>
  
  <p>The part commented is the Prepared Statement part. When I change it into normal statement, everything is right.</p>
  
  <p>Can someone tell me what am I missing?</p>
  
  <p>Many thanks.</p>
  
  <pre><code>private void btnLogin_Click(object sender, EventArgs e)
  {
      MySqlCommand cmd = MySqlConn.cmd;
      //cmd = new MySqlCommand("SELECT * FROM admin WHERE admin_username='@val1' AND admin_password=PASSWORD('@val2')", MySqlConn.conn);
      //cmd.Prepare();
      //cmd.Parameters.AddWithValue("@val1", tboxUserName.Text);
      //cmd.Parameters.AddWithValue("@val2", tboxPassword.Text);
      cmd = new MySqlCommand("SELECT * FROM admin WHERE admin_username='"+tboxUserName.Text+"' AND admin_password=PASSWORD('"+tboxPassword.Text+"')", MySqlConn.conn);
  
      MySqlDataReader res = cmd.ExecuteReader();
      if (!res.HasRows) { MessageBox.Show("Error! "); res.Close(); return; }
      else
      {
          //do something
      }
      res.Close();
  }
  </code></pre>