asp.net身份验证

[21蓝冰]

Sqlcommand cmd=new Sqlcommand();
cmd.CommandText("select count(*) from user where userName=" + this.txtUserName.text + " and userPassword=" + this.txtuserPassword.text);
int count = convert.toInt32(cmd.ExecuteScalar());
为什么会出错啊！

[吴青峰]

cmd.CommandText("select count(*) from user where userName='" + this.txtUserName.text + "' and userPassword='" + this.txtuserPassword.text+"'");
用户名和密码都是字符串类型，所以要加单引号，你试下我这个。

[int64]

[Quote=引用 1 楼 qingfeng_wu 的回复:]
cmd.CommandText("select count(*) from user where userName='" + this.txtUserName.text + "' and userPassword='" + this.txtuserPassword.text+"'");
用户名和密码都是字符串类型，所以要加单引号，你试下我这个。
[/Quote]
＋1

[Mandys]

[Quote=引用楼主 gs_zhaoyang 的回复:]
Sqlcommand cmd=new Sqlcommand();
cmd.CommandText("select count(*) from user where userName=" + this.txtUserName.text + " and userPassword=" + this.txtuserPassword.text);
int count = convert.toInt32(……
[/Quote]

+1

[hao1hao2hao3]

其实像这类错误，LZ只要加一个输出变量结果的操作就可以了

select count(*) from user where userName=" + this.txtUserName.text + " and userPassword=" + this.txtuserPassword.text

把上面的结果输出来看看，然后在查询分析器中执行，你就会发现其实就是T-SQL中数据类型出了问题。

[还想懒够]

加上单引号，然后需要把TextBox里面的单引号替换为两个单引号，否则轻轻松松进入到你的系统

[WoLouis]

[Quote=引用 1 楼 qingfeng_wu 的回复:]

cmd.CommandText("select count(*) from user where userName='" + this.txtUserName.text + "' and userPassword='" + this.txtuserPassword.text+"'");
用户名和密码都是字符串类型，所以要加单引号，你试下我这个。
[/Quote]
+1