using System;
using System.Data.SqlClient;

namespace Query_parametrica
{
    class Program
    {
        static void Main(string[] args)
        {
            SqlConnection cn = new SqlConnection("Data Source=.;Initial Catalog=tempdb;Integrated Security=SSPI");
            SqlCommand cmd = new SqlCommand("SELECT * FROM dbo.Students WHERE FirstName LIKE @FirstName", cn);
            string firstName = "And";

            /* Definisco il Command Type */
            cmd.CommandType = System.Data.CommandType.Text;
            
            /* Definisco il parametro di input */
            cmd.Parameters.Add(new SqlParameter("@FirstName", System.Data.SqlDbType.VarChar, 10));
            cmd.Parameters["@FirstName"].Value = "%" + firstName + "%";

            /* Apro la connessione ed eseguo la query */
            cmd.Connection.Open();
            SqlDataReader dr = cmd.ExecuteReader();

            /* Looppo il data reader */
            while(dr.Read())
            {
                Console.WriteLine("StudentID: {0}", dr["StudentID"].ToString());
                Console.WriteLine("FirstName: {0}", dr["FirstName"].ToString());
                Console.WriteLine("LastName: {0}", dr["LastName"].ToString());
                Console.WriteLine();
            }

            /* pulizia */
            dr.Close();
            cn.Close();
        }
    }
}