Sql Select Statement Help Needed.

I have worked on developing a project that I am pleased to say is comming along nicely considering I have only been doing programming for a few weeks but I am now stuck and may be going down the wrong path.





I have two tables one that is used for logging via username and password, it also holds a third coloumn realting to the suers account that they do not enter. Once they have logged in I am recalling the users identity and running a query to establish what account the user belongs to. Later on in the script I am trying to run a query on a table called orders that list all orders belonging to that account that was established in the earlier query labelled as 'accountrequesting'.


The script I have below returns all orders for all accounts even though I have tried a wide variety of endings on the Sql search on the orders table.





The code may look a little untidy and to advanced programmers may look rough but I am still learning.....please can anyone help.





sub Page_Load(sender as Object, e as EventArgs)





'collecting the user identity


Dim user as string


user=request("User.Identity.Name")





'running a query to establish what account they have access to all from users table


Dim accountrequesting as string


accountrequesting = "select account_id from users where username = " & user & "'"





'opening the data source and connection


Dim ConnectionString As String = "Data Source=xxxx;Database=xxxx;User ID=xxxxxxx;Password=xxxxxxx"


Dim Myconn as New SQLConnection(connectionstring)





'this is the line I am stuck on, the account id in this orders table needs to match against the value gained in accountrequesting above tried a lot of different endings





Dim MySQL as string ="select prodshipped, account_id from orders"





'produces output


Dim ds as Dataset=New Dataset()





Dim Cmd as new SQLDataAdapter (MySQL, Myconn)








Cmd.Fill (ds,"orders")





MyDataGrid.datasource=ds.tables("orders").defaultview





MyDataGrid.Databind()





End Sub