Architecture :: Pass Data From DAL To BLL And From BLL To PL?

I am developing an application for online examination system. It is 3 - tier application. I know how PL, BLL and DAL layers interact with each other but only one way. I meant, PL called BLL and BLL called DAL. However, recently I came across a scenario where I want to transfer a data from DAL to BLL and from BLL to PL or may be directly from DAL to PL.

I have "retrieve.aspx" page to reset forgotten password which contains a textbox and button. This page will ask Email address from user and when user hit the "Go" button, application will hit the database. If it finds the entered email address into a database, it will redirect to "questionanswer.aspx".

"questionanswer.aspx" contains a label, textbox and submit button. In the page load event of "questionanswer.aspx", application will show a security question (a fetched question from database related to entered email address) and ask user to fill an answer. On the click event of submit button, application again hit the database and authenticate the user, if the answer is correct it will redirect the user to password reset page. I can go up to fetching a question from database. But I do not know where to store it in DAL and how to pass it to PL where I can assign it to lable.text. I have 3 classes Users.cs, UserBAL.cs and UserDAL.cs. Retrieve.aspx.cs:

protected void btnGo_Click(object sender, EventArgs e)
{
Users PwdRetrieve = new Users();
PwdRetrieve.EmailAddress = txtEmailRetrive.Text.ToString();
Session["EmailAddress"] = txtEmailRetrive.Text.ToString();
UserBAL balPR = new UserBAL();
if (balPR.CheckEmailPR(PwdRetrieve))
{
Response.Redirect("questionanswer.aspx");
}
else
{
lblErrorMsg1.Text = ("We have not found an Email Address in our databse.");
lblErrorMsg2.Text = ("Please enter a valid Email Address.");
}
}
UserBAL.cs:
public bool CheckEmailPR(Users PwdRetrieve)
{
UserDAL dalPR = new UserDAL();
if (dalPR.CheckEmailPR(PwdRetrieve) > 0)
{
return true;
}
else
{
return false;
}
}
UserDAL.cs:
public int CheckEmailPR(Users PwdRetrieve)
{
int rows = 0;
using (SqlConnection conn = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString2"].ConnectionString))
{
string SP_CHECK_EMAIL = "CheckEmailForPasswordRetrival";
SqlCommand cmd = new SqlCommand(SP_CHECK_EMAIL, conn);
cmd.CommandType = CommandType.StoredProcedure;
cmd.Parameters.Add("@Email", SqlDbType.VarChar).Value = PwdRetrieve.EmailAddress;
cmd.Parameters.Add("@rows", SqlDbType.Int);
cmd.Parameters["@rows"].Direction = ParameterDirection.Output;
conn.Open();
rows = Convert.ToInt32(cmd.ExecuteScalar());
rows = (int)cmd.Parameters["@rows"].Value;
conn.Close();
}
return (int)rows;
}
Questionanswer.aspx.cs:
protected void Page_Load(object sender, EventArgs e)
{
txtAnswer.Focus();
Users QuestionAnswer = new Users();
QuestionAnswer.EmailAddress = (string)Session["EmailAddress"];
UserBAL balQA = new UserBAL();
if (balQA.FetchQuestion(QuestionAnswer))
{
lblQuestion.Text = "Do not know how to assign a fetched question to this lable.";
}
else
{
lblErrorMsgQA.Text = ("Sorry! Please enter a correct answer.");
}
}
UserBAL.cs:
public string FetchQuestion(Users QuestionAnswer)
{
UserDAL dalQA = new UserDAL();
if (dalQA.FetchQuestion(QuestionAnswer) != null)
{
}
else
{
}
}
UserDAL.cs:
public string FetchQuestion(Users QuestionAnswer)
{
string question = string.Empty;
using (SqlConnection conn = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString2"].ConnectionString))
{
string SP_FETCH_QUESTION = "FetchQuestion";
SqlCommand cmd = new SqlCommand(SP_FETCH_QUESTION, conn);
cmd.CommandType = CommandType.StoredProcedure;
cmd.Parameters.AddWithValue("@Email", SqlDbType.VarChar).Value = QuestionAnswer.EmailAddress;
conn.Open();
SqlDataReader read = cmd.ExecuteReader();
while (read.Read())
{
question = read["tblSecurityQuestion"].ToString();
}
read.Close();
conn.Close();
}
return question;
}