using System;
using System.Configuration;
using System.Data;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;
using System.Data.SqlClient;
public partial class _Default : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
}
protected void Button1_Click(object sender, EventArgs e)
{
string ConnectionString = "Data Source=.;Initial Catalog=user_info;Integrated Security=True";
SqlConnection conn = new SqlConnection(ConnectionString);
SqlCommand cmd = new SqlCommand();
cmd.Connection = conn;
string sql = "select * from login_infor where username='{0}' and password='{1}'";
sql = string.Format(sql, this.TextBox1.Text, this.TextBox2.Text);
cmd.CommandText = sql;
string role = "";
conn.Open();
SqlDataReader reader = cmd.ExecuteReader();
if (reader.Read())
{
role = reader.GetString(2);
if (role == "admin")
{
Response.Redirect("~/admin.aspx"); //if user's information is right, login successful
}
if (role == "user")
{
Response.Redirect("~/Default2.aspx"); //if user's information is right, login successful
}
}
else
{
Label3.Text = "user name or password is wrong";//if user's information is wrong, can't login
}
conn.Close();
}
protected void Button2_Click(object sender, EventArgs e)
{
Response.Redirect("~/register.aspx");
}
}
数据库为user_info
表名为login_infor
我运行后没有任何反应
|
