登录页面在VB ASP.NET中不起作用

debugcn 发表于 Dev

开尔文·穆利（Kelvin Muli）

我的登录页面有问题。我没有收到任何错误，所以不知道问题出在哪里？

Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Login.Click
    'connection string

    Dim mysqlconn As MySqlConnection = New MySqlConnection("server=localhost;user id=root;Password=123;database=users;persist security info=False")

    Dim cmd As New MySqlCommand
    Dim da As New MySqlDataAdapter
    Dim mydata As New DataTable
    Dim reader As MySqlDataReader

    Try
        mysqlconn.Open()
        Dim query As String
        query = "SELECT * FROM login_form where Username = '" & rfvUser.Text & "' and Password='" & rfvPWD.Text & "'"
        cmd = New MySqlCommand(query, mysqlconn)
        reader = cmd.ExecuteReader
        While reader.Read()
            If rfvUser.Text = "admin" And rfvPWD.Text = "admin" Then
                Me.Session("User") = Me.rfvUser.Text
                Server.Transfer("Admin.aspx")

            ElseIf (rfvUser.Text = reader("UserName").ToString()) And (rfvPWD.Text = reader("Password").ToString()) Then
                Me.Session("User") = Me.rfvUser.Text
                Server.Transfer("Ersal_send.aspx")

            Else

                ClientScript.RegisterStartupScript(Page.[GetType](), "validation", "<script language='javascript'>alert('Invalid Username or Password')</script>")

                reader.Close()
            End If

        End While

    Catch ex As Exception
        MsgBox(ex.Message)
    Finally
        mysqlconn.Dispose()

    End Try

End Sub

End Class

航海家

您是否尝试过直接通过SQL客户端运行查询？如果查询不返回任何行，则您的过程将完全退出而不会出现任何错误，因为它永远不会进入While循环。

另一个建议：将用户输入直接传递到查询中永远不是一个好主意。这导致SQL注入。使用参数化查询。谷歌。

本文收集自互联网，转载请注明来源。

如有侵权，请联系[email protected] 删除。