c# sqlserver 判断登录是否成功

//在数据库中查找是否有账号密码相同的用户

public bool isLoginSuccess(string account,string pwd)//参数是账号密码

{

   SqlConnection conn = new SqlConnection("Data Source=192.168.0.10;Initial Catalog=GZCharge;User                         ID=sa;Password=szjj1995");
            string strsql = "select * from TblUser where UserName = 'system' and PassWord = '12345'";
            conn.Open();
            SqlCommand com = new SqlCommand(strsql,conn);
            SqlDataReader da = com.ExecuteReader();
            bool isExit = da.HasRows;

            conn.Close();

            return isExit; //返回状态，true登录成功，false失败

}