简单的用户登陆判断

using  System;
using  System.Data;
using  System.Configuration;
using  System.Web;
using  System.Web.Security;
using  System.Web.UI;
using  System.Web.UI.WebControls;
using  System.Web.UI.WebControls.WebParts;
using  System.Data.SqlClient;
using  System.Configuration;
using  System.Web.UI.HtmlControls;


public   partial   class  _Default : System.Web.UI.Page 
... {
    protected void Page_Load(object sender, EventArgs e)
    ...{
        if (!Page.IsPostBack)
        ...{
            this.Button1.Attributes.Add("onclick","return jc()");
        }
    }
    protected void Button1_Click(object sender, EventArgs e)
    ...{
        string sql_con = ConfigurationSettings.AppSettings["STRING_CONN"];
        SqlConnection sql_conn = new SqlConnection(sql_con);
        SqlCommand sql_cmd=new SqlCommand("select * from users where name='"+this.TextBox1.Text.ToString()+"' and pwd='"+this.TextBox2.Text.ToString()+"'",sql_conn);
        sql_conn.Open();
        SqlDataReader reader = sql_cmd.ExecuteNonQuery();
        if (reader.Read())
        ...{
            Page.RegisterStartupScript("alert", "<script>alert('有该用户');</script>");
        }
        else
        ...{
            Page.RegisterStartupScript("alert", "<script>alert('没有该用户');</script>");
        }
    }
}
/**/ ///
截面加一个函数(判断用户名和密码是否输入)
< script language = javascript >
function jc()
... {
   var o1=document.getElementById("TextBox1");
   var o2=document.getElementById("TextBox2");
   if(o1.value=="")
   ...{
      alert("请输入用户名");      
      o1.focus();
      return false;
   }
   if(o2.value=="")
   ...{
   alert("请输入密码");
   o2.focus();
   return false;
   }
   return;
}
</ script >