c#,asp.net创建简单的登录注册页面及数据库的连接和读写
数据库:app，表:Student
db.cs文件
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Data.SqlClient;
///
/// db 的摘要说明
///
public class db
{
public db()
{
//
// TODO: 在此处添加构造函数逻辑
//
}
public static SqlConnection CreateConnection()
{
SqlConnection con = new SqlConnection("Data Source=PC-201510151352\\MSSQLSERVER1;Initial Catalog=app;User Id=sa;Pwd=1234");
return con;
}
}
Login.aspx文件
<%@ Page Language="C#" AutoEventWireup="true" CodeFile="Login.aspx.cs" Inherits="_Default" %>
用户登录页面
Login.aspx.cs文件
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data.SqlClient;
using System.Data;
public partial class _Default : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
}
protected void btnLogin_Click(object sender, EventArgs e)
{
if ((tbusername.Text == "") || (tbpsw.Text == ""))
{
Response.Write(@"");
}
else
{
SqlConnection con = db.CreateConnection();
con.Open();
string strSql = "select password from Student where username='" + tbusername.Text + "'";
SqlCommand cmd = new SqlCommand(strSql, con);
DataSet ds = new DataSet();
SqlDataAdapter da = new SqlDataAdapter(strSql, con);
da.Fill(ds, "Student");
try
{
if (tbpsw.Text == ds.Tables[0].Rows[0].ItemArray[0].ToString().Trim())
{
string curuser = tbusername.Text;
Response.Write(@"");
}
else
{
Response.Write(@"");
}
}
catch
{
Response.Write(@"");
}
con.Close();
}
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////
/*if (tbusername.Text == "")
{
Response.Write(@"");
goto abc;
}
if (tbpsw.Text == "")
{
Response.Write(@"");
goto abc;
}
string username = tbusername.Text;
string password = tbpsw.Text;
String connstr = "Data Source=PC-201510151352\\MSSQLSERVER1;Initial Catalog=app;User Id=sa;Pwd=1234";
string sql = "select * from Student where username=@username and password=@password";
SqlParameter[] parameters = { new SqlParameter("@username", username), new SqlParameter("@password", password) };
using (SqlConnection conn = new SqlConnection(connstr))
{
conn.Open();
using (SqlCommand cmd = conn.CreateCommand())
{
cmd.CommandText = sql;
cmd.Parameters.AddRange(parameters);
DataSet ds = new DataSet();
SqlDataAdapter adapter = new SqlDataAdapter(cmd);
adapter.Fill(ds);
DataTable table = ds.Tables[0];
if (table == null)
Response.Write(@"");
else
Response.Write(@"");
}
}
abc: ;
*/
///////////////////////////////////////////////////////////////////////////////////////////////////////////////
}protected void btnRegister_Click(object sender, EventArgs e)
{
if((tbusername.Text=="")||(tbpsw.Text==""))
{
Response.Write(@"");
}
else
{
try
{
SqlConnection con = db.CreateConnection();
con.Open();
string strsql = "insert into Student values('" + tbusername.Text + "','" + tbpsw.Text + "')";
SqlCommand cmd=new SqlCommand(strsql,con);
cmd.ExecuteNonQuery();
con.Close();
tbusername.Text="";
tbpsw.Text="";
Response.Write(@"");
}
catch
{
Response.Write(@"");
}
}
}
////////////////////////////////////////////////////////////////////////////////////////////////////////////////
/*String connstr = "Data Source=PC-201510151352\\MSSQLSERVER1;Initial Catalog=app;User Id=sa;Pwd=1234";
SqlConnection con = new SqlConnection();
con.ConnectionString = connstr;
con.Open();
SqlCommand cmd = new SqlCommand();
cmd.Connection = con;
String sql = String.Format("Insert into Student values('" + tbusername.Text + "','" + tbpsw.Text + "')");
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
Response.Write(@"");
// Response.Write(@"");
con.Close();
*/
///////////////////////////////////////////////////////////////////////////////////////////////////////////////
}