winform连access实现登录

try
            {
                string strConnection = "Provider=Microsoft.Jet.OleDb.4.0;";

                strConnection += @"Data Source=C:\Users\pc533\Desktop\1.mdb"; // 定义连接

                OleDbConnection objConnection = new OleDbConnection(strConnection);

                objConnection.Open();

                string sql = "select * from user where username='" + this.textBox1.Text + "' and password='" + this.textBox2.Text + "'";

OleDbCommand cmd = new OleDbCommand(sql, objConnection);
                int state = Convert.ToInt32(cmd.ExecuteScalar());//执行sql语句，并返回获得值 
                if (state == 0 || state > 1)//如果数据中没有记录或有多条记录则抱错 
                {
                    this.label3.Text = "用户不存在，请检测用户名和密码是否正确！";
                }
                else
                {
                    this.label3.Text = "登入成功！";

}
                objConnection.Close();

            }

            catch (Exception es)
            {
                MessageBox.Show("登录失败！");

            }

}