SqlDataReader的使用方式

protected string searchpwd(int i)
    {
        id = int.Parse(Request.Params["ID"].ToString());
        string pass = string.Empty;
        System.Data.SqlClient.SqlConnection conn = new System.Data.SqlClient.SqlConnection(System.Web.Configuration.WebConfigurationManager.ConnectionStrings["MobileConnectionString"].ToString());
        System.Data.SqlClient.SqlCommand comm = conn.CreateCommand();
        comm.CommandText = "select ZuserPass from ZuserInfo where ID='" + i + "'";
        conn.Open();
        System.Data.SqlClient.SqlDataReader read = comm.ExecuteReader();

        if (read.Read())
        {

            pass = read[0].ToString();
        }
        read.Close();
        conn.Close();
        return pass;
    }