userlogin.aspx.cs

这是一个网站

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using System.Configuration;

namespace WareStore.UserBusiness
{
	/// <summary>
	/// UserLogin 的摘要说明。
	/// </summary>
	public class UserLogin : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.Label Label1;
		protected System.Web.UI.WebControls.TextBox tbx_uid;
		protected System.Web.UI.WebControls.TextBox tbx_upassword;
		protected System.Web.UI.WebControls.Label lbl_message;
		protected System.Web.UI.WebControls.ImageButton btn_login;
	
		private void Page_Load(object sender, System.EventArgs e)
		{
			// 在此处放置用户代码以初始化页面
		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.btn_login.Click += new System.Web.UI.ImageClickEventHandler(this.btn_login_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

		private void btn_login_Click(object sender, System.Web.UI.ImageClickEventArgs e)
		{
			string str=ConfigurationSettings.AppSettings["dsn"];
			SqlConnection cn=new SqlConnection(str);
			cn.Open();
			/*
			string sel="select * from Users where Uid='"+this.tbx_uid.Text+"' and Upassword='"+this.tbx_upassword.Text+"'";
			SqlCommand cmd=new SqlCommand(sel,cn);
			SqlDataReader dr=cmd.ExecuteReader();
			*/
			SqlCommand cmd=new SqlCommand("UserLogin",cn);
			cmd.CommandType=CommandType.StoredProcedure;

			cmd.Parameters.Add(new SqlParameter("@Uid",SqlDbType.VarChar));
			cmd.Parameters.Add(new SqlParameter("@Upassword",SqlDbType.VarChar));
			
			cmd.Parameters["@Uid"].Value=this.tbx_uid.Text;
			cmd.Parameters["@Upassword"].Value=this.tbx_upassword.Text;
             
			SqlDataReader dr=cmd.ExecuteReader();
			if(dr.Read())
			{
				this.lbl_message.Text="";
				Session["Uid"]=dr["Uid"].ToString();
				Session["Upassword"]=dr["Upassword"].ToString();
				Session["Upower"]=dr["Upower"].ToString();
				if(Session["Upower"].ToString()=="1")
				{
					Response.Redirect("../frame/Index.aspx");
				}
				else if(Session["Upower"].ToString()=="2")
				{
					//Response.Redirect("../frame/Index2.aspx");
				}
			}
			else
			{
				this.lbl_message.Text="Sorry ";
			}
			cn.Close();

		}
	}
}