用户登陆操作(ASP.NET)

using  System;
using  System.Data;
using  System.Configuration;
using  System.Web;
using  System.Data.SqlClient;

namespace  DataOperator
... {
    /**//// <summary>
    /// Login 的摘要说明
    /// </summary>
    public class Login
    ...{
        /**//// <summary>
        /// 数据库联接字符串
        /// </summary>
        private string connstring;
        /**//// <summary>
        /// 数据库联接字符串
        /// </summary>
        public string Connstring
        ...{
            set
            ...{
                connstring = value;
            }
        }
        /**//// <summary>
        /// 用户登陆操作类
        /// </summary>
        public Login()
        ...{
            //
            // TODO: 在此处添加构造函数逻辑
            //
        }
        /**//// <summary>
        /// 检测用户登陆是否合法
        /// </summary>
        /// <param name="UserName"></param>
        /// <param name="PassWords"></param>
        /// <returns></returns>
        public string checkLogin(string UserName, string PassWords)
        ...{
            SqlConnection Conn = new SqlConnection(connstring);
            SqlCommand Comm = new SqlCommand("pr_login", Conn);
            Comm.CommandType = CommandType.StoredProcedure;
            Comm.Parameters.Add(new SqlParameter("@UserName", UserName));
            Comm.Parameters.Add(new SqlParameter("@PassWords", PassWords));
            Comm.Parameters.Add(new SqlParameter("@result", SqlDbType.VarChar, 50));
            Comm.Parameters["@result"].Direction = ParameterDirection.Output;
            Conn.Open();
            Comm.ExecuteNonQuery();
            Conn.Close();
            return (string)(Comm.Parameters["@result"].Value);
        }
    }
}

create   table  TSTUSERS
(
    UserName  varchar ( 50 )  primary   key ,
    PassWords  varchar ( 50 )  not   null
)
GO
insert   into  TSTUSERS  values ( ' test ' , ' test ' )
GO
CREATE    proc   pr_login
@UserName   varchar ( 50 ),                 -- UserName
@PassWords   varchar ( 50 ),                -- PassWord
@result   varchar ( 50 ) output           -- Result
as
select   *   from  TSTUSERS  where  UserName = @UserName
if ( @@rowcount < 1 )
    begin  
      set   @result = ' UserName Error '
    end
else
    begin  
      select   *   from  TSTUSERS  where  (UserName = @UserName ) and (PassWords = @PassWords )
      if ( @@rowcount < 1 )
         begin  
           set   @result = ' PassWord Error '
         end
      else  
         begin
           set   @result = ' ACCESS '
         end
    end
return