public string Login(String username, String password)
{
SqlConnection myConnection = new SqlConnection(ConfigurationSettings.AppSettings["ConnectionString"]);
SqlCommand myCommand = new SqlCommand("checklogin", myConnection);
myCommand.CommandType = CommandType.StoredProcedure; SqlParameter parameterUsername = new SqlParameter("@username", SqlDbType.VarChar,50);
parameterUsername.Value = username;
myCommand.Parameters.Add(parameterUsername);
SqlParameter parameterPassword = new SqlParameter("@password", SqlDbType.VarChar,100);
parameterPassword.Value = password;
myCommand.Parameters.Add(parameterPassword); SqlParameter parameterResult = new SqlParameter("@result", SqlDbType.VarChar,50);
parameterResult.Direction = ParameterDirection.Output;
myCommand.Parameters.Add(parameterResult); myConnection.Open();
myCommand.ExecuteNonQuery();
myConnection.Close(); string Result;
Result=parameterResult.Value.ToString();
return Result;
}存储过程:
PROCEDURE checklogin(
@username [varchar](50),
@password [varchar](100),
@result [varchar](50) output
)
AS
/* SET NOCOUNT ON */
SELECT leval_descript.leval_id
FROM user_info INNER JOIN
Role ON user_info.Role_guid = Role.Role_guid INNER JOIN
leval_descript ON Role.leval_guid = leval_descript.leval_guid
WHERE (user_info.user_name = @username) AND
(user_info.user_password = @password)
if(@@rowcount=1)
set @result ='true'
else
set @result ='false'
RETURN
{
SqlConnection myConnection = new SqlConnection(ConfigurationSettings.AppSettings["ConnectionString"]);
SqlCommand myCommand = new SqlCommand("checklogin", myConnection);
myCommand.CommandType = CommandType.StoredProcedure; SqlParameter parameterUsername = new SqlParameter("@username", SqlDbType.VarChar,50);
parameterUsername.Value = username;
myCommand.Parameters.Add(parameterUsername);
SqlParameter parameterPassword = new SqlParameter("@password", SqlDbType.VarChar,100);
parameterPassword.Value = password;
myCommand.Parameters.Add(parameterPassword); SqlParameter parameterResult = new SqlParameter("@result", SqlDbType.VarChar,50);
parameterResult.Direction = ParameterDirection.Output;
myCommand.Parameters.Add(parameterResult); myConnection.Open();
myCommand.ExecuteNonQuery();
myConnection.Close(); string Result;
Result=parameterResult.Value.ToString();
return Result;
}存储过程:
PROCEDURE checklogin(
@username [varchar](50),
@password [varchar](100),
@result [varchar](50) output
)
AS
/* SET NOCOUNT ON */
SELECT leval_descript.leval_id
FROM user_info INNER JOIN
Role ON user_info.Role_guid = Role.Role_guid INNER JOIN
leval_descript ON Role.leval_guid = leval_descript.leval_guid
WHERE (user_info.user_name = @username) AND
(user_info.user_password = @password)
if(@@rowcount=1)
set @result ='true'
else
set @result ='false'
RETURN
未处理的“System.Data.SqlClient.SqlException”类型的异常出现在 system.data.dll 中。其他信息: 系统错误。