解释一段C#代码

来源：百度知道 编辑：UC知道 时间：2024/05/30 07:06:46
protected void Button1_Click(object sender, EventArgs e)
{
string str_pwd = this.mypassword.Text.Trim().Replace("'", "''");
string sqlstr = "select usertype from Users where username='"+ username.Text+"'and mypassword=@password";
SqlCommand cmd = new SqlCommand(sqlstr,sms_conn);
cmd.Parameters.Add(new SqlParameter("@password", SqlDbType.VarChar,50));
cmd.Parameters["@password"].Value =str_pwd ;
//System.Web.Security.FormsAuthentication.HashPasswordForStoringInConfigFile(str_pwd, "MD5").ToString();//密码加密
sms_conn.Open();
SqlDataReader dr = cmd.ExecuteReader();
if (dr.Read() == true)
{
Session["user"] = this.username.Text.Trim();//管理员用户,Session进行传值
Session["type"] = dr["userType"].ToString().Trim

/// <summary>
/// 主要是判断输入的密码是否等于数据库中的密码的
/// </summary>
/// <param name="sender"></param>
/// <param name="e"></param>
protected void Button1_Click(object sender, EventArgs e)
{
string str_pwd = this.mypassword.Text.Trim().Replace("'", "''"); //这是把密码用一个字符串保存起来
string sqlstr = "select usertype from Users where username='" + username.Text + "'and mypassword=@password";//这是一个SQL语句，来判断密码输入是否正确的。

SqlCommand cmd = new SqlCommand(sqlstr, sms_conn); //定义一个SQL语句
cmd.Parameters.Add(new SqlParameter("@password", SqlDbType.VarChar, 50));//把密码 添加起来
cmd.Parameters["@password"].Value = str_pwd;//把第一行保存的密码赋值给它
//System.Web.Security.FormsAuthentication.HashPasswordForStoringInConfigF