各位高手帮忙看下这段代码哪里有错。。

[congc1212]

提示说User附近有语法错误

SqlConnection conn = new SqlConnection(@"server=(Local)\SQLEXPRESS;database=SkySystem; Trusted_Connection=True");

string strSQL = "SELECT UserName,PassWord from User WHERE UserName='"+ this.txt_user.Text +"'and PassWord='"+ this.txt_pw.Text +"'";
SqlCommand comm = new SqlCommand(strSQL, conn);
conn.Open();
SqlDataReader dr = comm.ExecuteReader();
bool btExist = false;
while (dr.Read())
{
btExist = true;
Session["UserName"] = dr.GetString(0);
Session["PassWord"] = dr.GetString(1);
}
if (btExist)
Response.Redirect("AmedFlight.aspx");
else
Label1.Text = "你输入的账号或密码有误";

conn.Close();

[missyoumuchtime]

sql语句写错了
“SELECT UserName,PassWord from User WHERE ” 错误！

User是sqlserver的关键字

把user换成[user]

[missyoumuchtime]

或者靶标的名称换个别的，非要用那么特殊的名字吗？？？？
随便改一个就可以@

[nesto]

[Quote=引用 1 楼 missyoumuchtime 的回复:]
sql语句写错了
“SELECT UserName,PassWord from User WHERE ” 错误！

User是sqlserver的关键字

把user换成[user]
[/Quote]
up

[沉序员]

不能用关键字USER
变成USERS都可以的

[congc1212]

谢谢各位