mysql - Vb.net登录 session 和Mysql查询

Question

我有一个登录页面，我想收集用户 ID 并使用 session 来存储它，以便我可以在重定向页面上使用它。

登录页面:

Dim Query As String
            Query = "select * from mdxmain.taffiliate where affID = '" & username.Text & "' and affPassword = '" & password.Text & "'"
            COMMAND = New MySqlCommand(Query, MysqlConn)
            Session("affID") = username.Text
            HttpContext.Current.Session.Add("affID", userid)

            READER = COMMAND.ExecuteReader

            Dim count As Integer
            count = 0

            While READER.Read
                count = count + 1
            End While

            If count = 1 Then


                Response.Redirect("dashboard.aspx")

            Else
                Literal1.Text = "Invalid credentials"
            End If

            MysqlConn.Close()

        Finally

        End Try
        MysqlConn.Dispose()

以及其中包含查询的dashboard.aspx页面:

Dim c As New MySqlConnection("Server=localhost;Database=test;UID=test;PWD=test;")
        c.Open()
        Dim com As New MySqlCommand("SELECT COUNT(*) as c FROM toutcome WHERE AffID = 'MW0011' AND CompletedDate >= CURDATE();", c)
        Dim myReader As MySqlDataReader = com.ExecuteReader(CommandBehavior.CloseConnection)
        myReader.Read()
        Label1.Text = myReader.Item(0).ToString()

现在我想做的是客户使用他的 ID 登录，我想将该 ID 复制到 session 中，然后在上面的查询中使用它(将 MW0011 替换为 session ID)，请帮助我。

Answer 1

尝试将查询 WHERE AffID = 'MW0011' 替换为 WHERE AffID = '"& CType(Session.Item("affID"), String) & "'