var parameters = new { UserName = username, Password = password };
var sql = "select * from users where username = @UserName and password = @Password";
var result = connection.Query(sql, parameters);