WEB学习篇--------第三篇（ASP.NET与数据库SQL2005的连接）

     if (txtUserName.Text.Trim() == "" || txtUserPass.Text.Trim() == "")
              {
                 Response.Write("<script>alert('登录名和密码不能为空！');location='javascript:history.go(-1)';</script>");
              }

            if (TextBox3.Text.ToString().Equals(Session["Vnumber"].ToString()))
            {
                string password = txtUserPass.Text;
                string str = "Data Source=localhost;Initial Catalog=Jingying;Integrated Security=True";
                SqlConnection conn = new SqlConnection(str);
                conn.Open();
                string sql = "select Password from tb_User where Username='" + txtUserName.Text + "'";
                SqlCommand com = new SqlCommand(sql, conn);
                SqlDataAdapter sda = new SqlDataAdapter(com);
                DataSet ds = new DataSet();
                sda.Fill(ds);
                if (ds.Tables[0].Rows.Count == 0)
                {
                    Response.Write("<script>alert('当前用户不存在！');location='javascript:history.go(-1)';</script>");
                }
                else if (ds.Tables[0].Rows[0][0].ToString() == password)
                {
                    Session["name"] = txtUserName.Text;
                    Response.Redirect("Index.aspx");
                }
                else
                {
                    Response.Write("<script>alert('密码错误！');location='javascript:history.go(-1)';</script>");
                    txtUserPass.Text = "";
                }
                conn.Close();
            }
            
            else
            {
                //出错提示
                Response.Write("<script language=javascript>alert('你输入的验证码不正确');location='javascript:history.go(-1)'</script>");
            }