存储过程找bug(一)
CREATE PROCEDURE UserCheck
@userName VARCHAR(10)=NULL,
@userPWD VARCHAR(10)=NULL,
@userId INTEGER OUTPUT
AS
BEGIN
SET NOCOUNT ON
DECLARE
@theUserPWD VARCHAR(10),
@ErrorMsg VARCHAR(400)
SET @userId=0
SELECT @userId=tu.userId,@theUserPWD=tu.userPWD FROM dbo.tblUSER tu
WHERE (tu.userName=@userName)
IF @userId=0
BEGIN
SET @ErrorMsg= '**您输入的的登录用户名在数据库中不存在,请查证后重试**'+CHAR(13)+CHAR(10)+'**如有疑问,请参照用户手册或者与管理员联系**'
RAISERROR(@ErrorMsg,16,1)
RETURN @userId
END
IF @theUserPWD<>@userPWD
BEGIN
SET @ErrorMsg= '**您输入的的登录用户密码错误,请注意字母大小写**'+CHAR(13)+CHAR(10)+'**如有疑问,请参照用户手册或者与管理员联系**'
RAISERROR(@ErrorMsg,16,1)
RETURN @userId
END
UPDATE dbo.tblUSER
SET
userLastTime=GETDATE()
WHERE userId=@userId
RETURN @userId
SET NOCOUNT OFF
END
GO