菜鸟新手100分求救，请大家指点，谢谢

Question

<%@  Debug="true"  %>  
<%@  Import  Namespace="System.Data.SqlClient"  %>  
<%@  Import  Namespace="System.Data"  %>  
<Script  Runat="Server">  
sub  button_click(s  As  object,  e  As  eventargs)  
dim  txtusername  
dim  txtpwd  
txtusername=trim(request("txtusername"))  
txtusername=replace(txtusername,"'","")  
txtusername=replace(txtusername,"-","")  
txtusername=replace(txtusername,"  &brvbar;","")  
txtusername=replace(txtusername,"?","")  
txtusername=replace(txtusername,"#","")  
txtusername=replace(txtusername,"&","")  
txtusername=replace(txtusername,"@","")  
txtusername=replace(txtusername,"*","")  
txtusername=replace(txtusername,"!","")  
txtusername=replace(txtusername,"<","")  
txtusername=replace(txtusername,">","")  
 
txtpwd=trim(request("txtpwd"))  
txtpwd=replace(txtpwd,"'","")  
txtpwd=replace(txtpwd,"-","")  
txtpwd=replace(txtpwd,"  &brvbar;","")  
txtpwd=replace(txtpwd,"?","")  
txtpwd=replace(txtpwd,"#","")  
txtpwd=replace(txtpwd,"&","")  
txtpwd=replace(txtpwd,"@","")  
txtpwd=replace(txtpwd,"*","")  
txtpwd=replace(txtpwd,"!","")  
txtpwd=replace(txtpwd,"<","")  
txtpwd=replace(txtpwd,">","")  
 
if  session("username")=""  then  
           if  txtusername<>""  and  txtpwd<>""  then  
 
Dim  conpubs  As  SqlConnection  
Dim  cmdselect  as  sqlcommand  
Dim  rs  as  sqldatareader  
dim  groupname  as  string  
 
   conpubs  =  New  SqlConnection(  "Server=127.0.0.1;UID=sa;PWD=;Database=login"  )  
   groupname  =  "select  *  from  login  where  username=@username  and  password=@password"  
   cmdSelect  =  New  SqlCommand(  groupname,  conpubs  )  
   cmdSelect.parameters.add  (  "@username",  txtusername)  
   cmdSelect.parameters.add  (  "@password",  txtpwd)  
   conpubs.Open()  
 
rs=cmdSelect.executereader()  
session("username")=txtusername  
 
 
session("popedom")=rs("popedom")'====================这行报错“System.InvalidOperationException:  在没有任何数据时进行无效的读取尝试”  
 
 
Dim  strinsert  As  String  
Dim  cmdinsert  as  sqlcommand                          
 strinsert  =  "insert  login  (lastdate,userip)  values  (@lastdate,@userip)"  
 cmdinsert  =  new  sqlcommand  (strinsert,conpubs)  
 cmdinsert.parameters.add  (  "@lastdate",  sqldbtype.datetime).value  =  now  
 cmdinsert.parameters.add  (  "@userip",  request.servervariables("remote_addr"))  
 
rs.Close()  
conpubs.Close()              
end  if  
else  
                                   response.redirect  ("../index.aspx")  
end  if  
end  sub  
</Script>  
 
请高手指点

Answer 1

rs=cmdSelect.executereader() 
rs.read()          '''''''''''''''加这行 
session("username")=txtusername  
 
 
session("popedom")=rs("popedom")'====================这行报错“System.InvalidOperationException:  在没有任何数据时进行无效的读取尝试”  

Answer 2

谢谢，还要麻烦你Dim  strinsert  As  String  
Dim  cmdinsert  as  sqlcommand                          
 strinsert  =  "insert  login  (lastdate,userip)  values  (@lastdate,@userip)"  
 cmdinsert  =  new  sqlcommand  (strinsert,conpubs)  
 cmdinsert.parameters.add  (  "@lastdate",  sqldbtype.datetime).value  =  now  
 cmdinsert.parameters.add  (  "@userip",  request.servervariables("remote_addr"))好象数据没有被更新啊，还请指点，分不够再加

Answer 3

是程序没执行！你要看看是否变量被初始化或者SQL语句是否有错！
用跟踪的方法查看哪个地方出错！

Answer 4

cmdinsert.ExecuteNonQuery()倒，你后面就别加什么；号了