ASP.NET登录验证代码

 ASP.NET登录验证代码

SqlConnection con = new SqlConnection("server=.;database=DBUser;UID=sa;PWD=sa");
        con.Open();
        SqlCommand cmd = new SqlCommand("select * from UserTable where UserName='" + this.TxtName.Text.Trim() + "'and UserPWD='"+TxtPWD.Text.Trim()+"'",con);
       
        SqlDataReader dr=cmd.ExecuteReader();
       
        if(dr.Read())
        {
           Session["UserName"] = Convert.ToString(TxtName.Text.Trim());
           Response.Redirect("admin.aspx");
        }
        else
        {
        Response.Write("<Script>alert('用户名或密码错误不存在');</Script>");
        }
        dr.Close();
       
        con.Close(); 

 

//注意：数据的字段类型要于文本框内容的数据类型相匹配