Question

System.Data.SqlClient.SqlException: '1' 附近有语法错误。

源错误: 27: SqlDataReader dr = cmd.ExecuteReader();

string strconn = "data source=.;database=hh;integrated security=true";
SqlConnection conn = new SqlConnection(strconn);
conn.Open();
string sqlconn = "select count(*) from dl_yonghu where dl_user='" + TextBox1.Text + "'and dl_mima'" + TextBox2.Text + "'";
SqlCommand cmd = new SqlCommand(sqlconn, conn);
SqlDataReader dr = cmd.ExecuteReader();
if (dr.HasRows)
{
Response.Write("<script>alert('用户名密码正确！');</script>");
Server.Transfer("dl4.aspx");
}
else
{
Response.Write("<script>alert('用户名或密码不正确！');</script>");
}
dr.Close();
conn.Close();

Answer 1

你改成这样试试：
string strconn = "data source=.;database=hh;integrated security=true";
SqlConnection conn = new SqlConnection(strconn);
conn.Open();
string sqlconn = "select count(*) as count from dl_yonghu where dl_user='" + TextBox1.Text + "'and dl_mima'" + TextBox2.Text + "'";
SqlCommand cmd = new SqlCommand(sqlconn, conn);
SqlDataReader dr = cmd.ExecuteReader();
int count=0;
if (dr.Read())
{
count=Convert.ToInt32(dr["count"]);
}

if( count>0){
Response.Write("<script>alert('用户名密码正确！');</script>");
Server.Transfer("dl4.aspx");

}
else
{
Response.Write("<script>alert('用户名或密码不正确！');</script>");
}
dr.Close();
conn.Close();

追问

还是不行，也是这个句子有错误：源错误: 27: SqlDataReader dr = cmd.ExecuteReader();

怎么总是这个错误的？刚学不久，还是菜鸟阶段的

追答

//定义数据库连接字符串
string strconn = "data source=.;database=hh;integrated security=true";
//定义sql语句
string sqlconn = string.formart("select count(*) as count from dl_yonghu where dl_user='{0}' and dl_mima='{1}'" ,TextBox1.Text ,TextBox2.Text );
//创建数据库连接
SqlConnection conn = new SqlConnection(strconn);
//打开数据库连接：
conn.Open();
//创建命令
SqlCommand cmd = new SqlCommand(sqlconn, conn);
//调用查询方法
SqlDataReader dr = cmd.ExecuteReader();
int count=0;
if (dr.Read())
{
count=Convert.ToInt32(dr["count"]);
}
if( count>0){
Response.Write("alert('用户名密码正确！');");
Server.Transfer("dl4.aspx");

}
else
{
Response.Write("alert('用户名或密码不正确！');");
}

Answer 2

string sqlconn = "select count(*) from dl_yonghu where dl_user='" + TextBox1.Text + "'and dl_mima'" + TextBox2.Text + "'";
应为:
string sqlconn = "select count(*) from dl_yonghu where dl_user='" + TextBox1.Text + "'and dl_mima='" + TextBox2.Text + "'";
少了一个等于号