天天看点

存储过程判断用户登录信息

存储过程判断用户登录信息

2007-05-13 18:49

create proc checkadmin

(

@username varchar(50),

@userpwd varchar(50)

)

as

declare @flag int

declare @pass varchar(50)

select @pass=userpwd from admin_login where [email protected]

if @@rowcount=0

set @flag=0

else

   if @[email protected]

set @flag=1

   else

set @flag=2

go

SqlConnection myconn = db.openconn();

             try

             {

                 myconn.Open();

                 SqlCommand mycom = new SqlCommand("checkadmin", myconn);

                 mycom.CommandType = CommandType.StoredProcedure;

                 SqlParameter sp = new SqlParameter("@username", SqlDbType.VarChar);

                 sp.Value = username.Text;

                 mycom.Parameters.Add(sp);

                 sp = new SqlParameter("@userpwd", SqlDbType.VarChar);

                 sp.Value = userope.encrypt(userpwd.Text);

                 mycom.Parameters.Add(sp);

                 sp = new SqlParameter("@flag", SqlDbType.Int);

                 sp.Direction = ParameterDirection.Output;

                 mycom.Parameters.Add(sp);

                 mycom.ExecuteNonQuery();

                 if (mycom.Parameters["@flag"].Value.ToString() == "0")

                 {

                     userope.mess("用户名不存在!", "admin_login.aspx");

                 }

                 else if (mycom.Parameters["@flag"].Value.ToString() == "1")

                 {

                     Response.Redirect("add_admin.aspx");

                 }

                 else

                 {

                     userope.mess("密码有错!", "admin_login.aspx");

                 }

             }

             finally

             {