fighting C# just to do simple things.

$tbl = DBDO::factory('mydb','user');
if (!$tbl->get('username', $_POST['username']) ||
    !($tbl->password == md5($_POST['password'])) {
      return false; // access denied....
}

$log = DBDO::factory('mydb','activity');
$log->user_id = $tbl->id;
$log->at_time = date('Y-m-d H:i:s');
$log->insert();

SqlCommand dbcmd = new SqlCommand(
            "SELECT * FROM user_details_basic WHERE " + 
            "username = @username"
            ,dbcon); 
        SqlParameter param = new  SqlParameter("@username",  
		SqlDbType.VarChar     );
        param.Value = Request.params['username'];
        dbcmd.Parameters.Add(param);
        ArrayList user = getResults(dbcmd); // This is a 40 line method!
        if (user.Count < 1) {
            closeDB();
            return 0; // not found..
        }
        // as I said before (md5 is a 10 line method)
        if (0 != String.Compare((String) qmd5(password) , 
			(String) ((Hashtable) user[0])["password"])) {
            closeDB();
            return 0;
        }
.....
  SqlCommand dbcmd = new SqlCommand(
                 "INSERT INTO activity " + 
                "   ( user_id,   at_time   )" +
                " VALUES ( @user_id , GETDATE() )",dbcon); 
        param = new SqlParameter("@user_id", SqlDbType.Int);
        param.Value = (int) ((Hashtable) user[0])["id"])
        dbcmd.Parameters.Add(param);
        // imagine this code with quite a few more parameters.
        reader = dbcmd.ExecuteReader();