Unity3d C# select statement for GUI.TextArea

Questions & Answers
1

Good day to all, i have a problem, i have made a login with mysql remote connection. when im trying to login i cant login. i dont know how to use the GUI.TextArea exactly. here is my code:

void OnGUI()
{
GUI.Box(new Rect(Screen.width/2-60,Screen.height/2-105,120,210),"Score");
firstName = GUI.TextArea(new Rect(Screen.width/2-45,Screen.height/2-80,90,20),firstName);
Password = GUI.TextArea(new Rect(Screen.width/2-45,Screen.height/2-50,90,20),Password);
if(GUI.Button(new Rect(Screen.width/2-45,Screen.height/2-20,90,20),"Continue"))

{
    SelectDatabase(firstName,Password);
}
if(GUI.Button(new Rect(Screen.width/2-50,Screen.height/2+70,100,20),"Back to Menu"))
{
    Application.LoadLevel("mainMenu");
}
}
public void SelectDatabase(string username, string password)
{
connectionstring = @"Server=db4free.net; Port=3306; Database=gladia***; Uid=der****; Password=*********;";
conn = new MySqlConnection(connectionstring);
da = new MySqlDataAdapter();
ds = new DataSet();
try 
{
    da.SelectCommand = conn.CreateCommand();
    da.SelectCommand.CommandText = "select * from users where username=@username and password=@password";
    da.SelectCommand.CommandType = CommandType.Text;
    da.SelectCommand.Parameters.Add("@username",MySqlDbType.Text,15,"username").Value = username;
    da.SelectCommand.Parameters.Add("@password",MySqlDbType.Text,15,"password").Value = password;
    da.Fill(ds,"users");
    if (ds.Tables["users"].Rows.Count == 1) 
    {
        Debug.Log("pasok!");
    }
    else 
    {
        Debug.Log("Wrong username and Password");
    }
} 
catch (System.Exception ex) 
{
    Debug.Log(ex.Message);
}
}

if i change the @username to a correct username and @password to correct password im successfully login. what may be the possible reason why Debug.Log(“Wrong username and Password”); always prompting? i think the problem is in firstName and Password variables but i dont know how to fix it. thank you in advance.

2

I never used the Parameters collection. Usually i just build the sql command “manually” like this:

da.SelectCommand.CommandText = "select * from users where username='" + username + "' and password='" + password + "'";

Beside that, keep in mind that a TextArea allows newline characters. You might want to use a TextField instead.

That might fix your problem, but your database setup is not very safe!!!
The C# code of your game can easily be viewed with a C# reflector, even from a web build. Never open a direct database connection from a user’s PC. You usually use a server side script (like a PHP script) on a webserver to handle database interactions.