html - asp.net连接数据库读取数据

Question

我在这里做错了什么？我得到一个错误:

incorrect syntax near =

在这行代码中:

Dim SqlDataReader As SqlClient.SqlDataReader = SQLCommad.ExecuteReader()

我的代码:

Dim Username = TUserName.Text
Dim Password = TPassword.Text

Dim SqlConnection = New SqlClient.SqlConnection(My.Settings.DBConnection.ToString)
Dim SQLCommand = New SqlClient.SqlCommand("select * from " + My.Settings.TableName.ToString + "Where EmpID = " + Username, SqlConnection)
SqlConnection.Open()

Dim SqlDataReader As SqlClient.SqlDataReader = SQLCommand.ExecuteReader

While (SqlDataReader.Read)
      If Username = SqlDataReader(1).ToString And Password = SqlDataReader(20).ToString Then
         If eEncrypt(Username, Password) Then
            MsgBox("You are NOT logged in")
         Else
            MsgBox("You are logged in")
         End If
      End If
End While

SqlConnection.Close()

Answer 1

这应该可以，看看如何添加参数

Dim Username = TUserName.Text
Dim Password = TPassword.Text

Dim SqlConnection = New SqlClient.SqlConnection(My.Settings.DBConnection.ToString)
Dim SQLCommand = New SqlClient.SqlCommand("select * from " + My.Settings.TableName.ToString + "Where EmpID = @Username", SqlConnection)

SQLCommand.Parameters.AddWithValue("@Username", Username)
SqlConnection.Open()

Dim SqlDataReader As SqlClient.SqlDataReader = SQLCommand.ExecuteReader()

While (SqlDataReader.Read)
      If Username = SqlDataReader(1).ToString And Password = SqlDataReader(20).ToString Then
         If eEncrypt(Username, Password) Then
            MsgBox("You are NOT logged in")
         Else
            MsgBox("You are logged in")
         End If
      End If
End While

SqlConnection.Close()