典型的asp.net登陆验证代码

void Page_Load(object sender, System.EventArgs e)
  {
   string username=Request.Form.Get("UserName");
   string pwd=Request.Form.Get("PassWord");
   ConnectSql(username,pwd);
  }
  private void ConnectSql(string username,string pwd)
  {
   IDbConnection conn = null;
   try
   {
    conn = new SqlConnection("server=192.168.0.220;uid=sa;pwd=;database=text");
    conn.Open();
    string mySel="select * from [user] where name="+"'"+username+"'";
    SqlCommand com = new SqlCommand(mySel, (SqlConnection)conn);
    SqlDataReader reader = com.ExecuteReader();
    if(!reader.HasRows)
    {
     Response.Redirect("index.aspx?error=用户名错误");
    }
    else
    {
     while(reader.Read())
     {
      if(pwd!=reader.GetString(2))
       Response.Redirect("index.aspx?error=密码错误");
      else
       Response.Redirect("Main.html");
     }
    }
   }
   catch(SqlException)
   {
    Response.Write("在打开连接时出现连接级别的错误！");
   }
   finally
   {
    if(conn != null)
     conn.Close();

}