注册时加密数据,登陆时读取加密数据

//注册部分--------数据库操作代码   

string strcon=ConfigurationSettings.AppSettings["connentingString"];
   SqlConnection con= new SqlConnection(strcon);
   string sql= "insert into textlogin(username,[password]) values ('"+this.tbUsername.Text+"','"+Encypt(this.tbPassword.Text)+"')";
   SqlCommand cmd =new SqlCommand(sql,con);
   con.Open();
   cmd.ExecuteNonQuery();
   con.Close();
   Response.Write("<script>alert('注册成功!');</script>");

//登陆部分----------

   string strcon=ConfigurationSettings.AppSettings["connentingString"];
   SqlConnection con= new SqlConnection(strcon);
   con.Open();
   string sql="select count(username) from textlogin where username='"+this.tbUsername.Text+"' and [password]='"+Encrypt(this.tbPassword.Text)+"'";
   SqlCommand cmd=new SqlCommand(sql,con);
   int aa=Convert.ToInt32(cmd.ExecuteScalar());
   if(Convert.ToInt32(cmd.ExecuteScalar())>0)
   {
    Response.Write("<script>alert('you are success');</script>");
   }
   else
   {
                Response.Write("<script>alert('you are fail');</script>");
   }
   con.Close();

//加密算法代码如下

  private string Encypt(string str)
  {
   Byte[] pass = Encoding.UTF8.GetBytes(str);//把要加密的字符串转为UTF8编码
   MD5 md5 =new MD5CryptoServiceProvider();
   return Encoding.UTF8.GetString(md5.ComputeHash(pass));

//计算UTF8字节数组的MD5哈希值，转为字符串
  }