Parametric Sql Request

due to SQL Injection Attack I use parametric sql request like this   SqlConnection cnx = new SqlConnection(strCnx))        SqlParameter prm;        cnx.Open();        string strQry =             "SELECT Count(*) FROM Users WHERE UserName=@username ";        int intRecs;        SqlCommand cmd = new SqlCommand(strQry, cnx);        cmd.CommandType= CommandType.Text;        prm = new SqlParameter("@username",SqlDbType.VarChar,50);        prm.Direction=ParameterDirection.Input;        prm.Value = txtUser.Text;        cmd.Parameters.Add(prm);but how do I retrieve values ndlr, I have several rowsnormally its like SqlDataAdapter ...                        DataSet...                        DataTable...                        foreach (Datarow datarow in DataTable.Rows)                        {                           ......                        }so how do I retrieve values in parametric request ?????