身份验证例子（VB.NET）

Imports System
Imports System.Web
Imports System.IO
Imports System.Data
Imports System.Data.SqlClient
Public Class login
    Inherits System.Web.UI.Page

#Region " Web 窗体设计器生成的代码 "

    '该调用是 Web 窗体设计器所必需的。
    <System.Diagnostics.DebuggerStepThrough()> Private Sub InitializeComponent()

    End Sub
    Protected WithEvents Message As System.Web.UI.WebControls.Label
    Protected WithEvents Form1 As System.Web.UI.HtmlControls.HtmlForm
    Protected WithEvents txtUserID As System.Web.UI.WebControls.TextBox
    Protected WithEvents txtPass As System.Web.UI.WebControls.TextBox
    Protected WithEvents ImageButton1 As System.Web.UI.WebControls.ImageButton

    '注意: 以下占位符声明是 Web 窗体设计器所必需的。
    '不要删除或移动它。
    Private designerPlaceholderDeclaration As System.Object

    Private Sub Page_Init(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Init
        'CODEGEN: 此方法调用是 Web 窗体设计器所必需的
        '不要使用代码编辑器修改它。
        InitializeComponent()
    End Sub

#End Region

    Private Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        If Not Page.IsPostBack Then

        End If
        '在此处放置初始化页的用户代码
    End Sub

    Private Sub ImageButton1_Click(ByVal sender As System.Object, ByVal e As System.Web.UI.ImageClickEventArgs) Handles ImageButton1.Click
        Try
            txtUserID.Text = CType(txtUserID.Text, Integer)
        Catch ex As Exception
            Message.Text = "请输入正确的员工编号"
            Exit Sub
        Finally
            Beep()
        End Try

            Dim conn As SqlConnection = New SqlConnection(ConfigurationSettings.AppSettings().Item("conn_15"))
            Dim myCmd As SqlCommand
            Dim sqlparm As SqlParameter
            Dim strCommandText As String = "CHECKPASS"   '存储过程

            conn.Open()
            sqlparm = New SqlParameter
            myCmd = New SqlCommand(strCommandText, conn)
            myCmd.CommandType = CommandType.StoredProcedure

            sqlparm = myCmd.Parameters.Add("@USER", SqlDbType.VarChar, 20)
            sqlparm.Value = Me.txtUserID.Text
            sqlparm = myCmd.Parameters.Add("@PASSWORD", SqlDbType.VarChar, 10)
            sqlparm.Value = Me.txtPass.Text
            sqlparm = myCmd.Parameters.Add("@des", SqlDbType.VarChar, 20)
            sqlparm.Direction = ParameterDirection.Output
            sqlparm = myCmd.Parameters.Add("@dept", SqlDbType.VarChar, 10)
            sqlparm.Direction = ParameterDirection.Output
            sqlparm = myCmd.Parameters.Add("@WH", SqlDbType.VarChar, 20)
            sqlparm.Direction = ParameterDirection.Output
            sqlparm = myCmd.Parameters.Add("@usr_lib", SqlDbType.Int)
            sqlparm.Direction = ParameterDirection.Output

            myCmd.ExecuteNonQuery()
            Session("UserID") = Me.txtUserID.Text
            Session("USER") = myCmd.Parameters("@des").Value

            myCmd.Parameters.Clear()
            conn.Close()

        If IsDBNull(Session("USER")) Then
            Response.Write("<script>javascript:alert('用户名或密码错误!!');</script>")
            Response.Redirect("Default.aspx")
        Else
            Response.Redirect("load.aspx")
        End If

    End Sub
End Class