谁能帮我－－－－在线急等

[xunjie]

用C＃写一个asp.net的登录页面，只验证用户名和密码就可以了，请用中文说明一下

[stuhome]

1."select password from user_table where user_name=Textbox_username.Text"将密码赋给变量pwd;
2.if(pwd.Equals(Textbox_password))
{
Session["username"]=Textbox_username.Text;
}
else
{
Response.write("密码错误");
}

[xu0923]

string uid=Conn.Replace(this.txtUid.Text);
string pwd=Conn.Replace(this.txtPwd.Text);
if(uid=="" || pwd=="")
{
//this.lblInfo.Text="请填写用户名和密码";
Page.RegisterStartupScript("","<script language='JavaScript'>alert('请填写用户名和密码');</script>");
return;
}
operDB=new Conn();
//打开数据库
try
{
operDB.Open();
}
catch
{
return;
}
SqlDataReader reader;
strSql=new StringBuilder();

strSql.Append("select password from register where nickname='" + uid + "';");
strSql.Append("select figureid,empid,depid from operator where empid=(select empid from register where nickname='" + uid + "');");
operDB.Search(strSql.ToString(),operDB.conn,out reader);
//如果有 匹配 nickName 的用户
if(reader.Read())
{
//如果密码匹配
if(pwd==reader.GetString(0))
{

if(reader.NextResult())
{
//取得权限
if(reader.Read())
{
string role=reader.GetInt32(0).ToString();
//产生 Ticket
FormsAuthenticationTicket userTicket=new FormsAuthenticationTicket(1,uid,
DateTime.Now,DateTime.Now.AddMinutes(30),true,role,"login");
//加密票据
string hashUserTicket=FormsAuthentication.Encrypt(userTicket);
//产生新的Cookie
HttpCookie userCookie=new HttpCookie("login",hashUserTicket);
Response.Cookies.Add(userCookie);

//保存EmpID 和 DepID 保存到 Session 中
Session["EmpID"]=reader.GetString(1);
Session["DepID"]=reader.GetInt32(2);
Session["rightID"]=role;
//返回用户原来返回的页面
Context.Response.Redirect(Context.Request["ReturnUrl"],true);
}
else
{
/***********************************************/
//出现此中情况的可能时,在Register表中有此员工记录
//而在在Operator表中没有此员工的记录
//所以不能登录此系统
//this.lblInfo.Text="此用户没有访问权限,请与系统管理员联系!";
Page.RegisterStartupScript("","<script language='JavaScript'>alert('此用户没有访问权限,请与系统管理员联系！');</script>");
return;
}
}

}
else
{
//this.lblInfo.Text="密码错误";
Page.RegisterStartupScript("","<script language='JavaScript'>alert('密码错误！');</script>");
return;
}
}
else
{
//this.lblInfo.Text="没有此用户!";
Page.RegisterStartupScript("","<script language='JavaScript'>alert('没有此用户！');</script>");
return;
}
reader.Close();
operDB.Close();