ASP.netÊý¾Ý¿â²éѯ£¬¼±¡­¡­ - .NET¼¼Êõ / ASP.NET

protected void btnEnter1_Click(object sender, EventArgs e)
  {
  string username = txtUserName.Text.Trim();
  string strConnection = "Data Source=.;Initial Catalog=MySchool;User ID=sa;Password=guo";
  string strSql = "select * from Student where LoginId='@username'";
  SqlConnection conn = new SqlConnection(strConnection);
  SqlCommand command = new SqlCommand();
  command.CommandText = strSql;
  command.Connection = conn;
  SqlParameter param = new SqlParameter("@username", SqlDbType.VarChar, 30);
  param.Value = username;
  command.Parameters.Add(param);//Ìí¼Ó²ÎÊý
  conn.Open();
  SqlDataReader reader= command.ExecuteReader();
  GridView2.DataSource = reader;
  GridView2.DataBind();//½øÐÐÊý¾Ý°ó¶¨
  reader.Close();
  conn.Close();
  conn.Dispose();
  }ΪɶÀÏÊDz»³ö½á¹û£¬Çë¸÷λ°ïæ¿´¿´£¡

---

SQL code:

¸Ä³ÉÎÒÕâÑù¾ÍºÃÁË
protected void btnEnter1_Click(object sender, EventArgs e)
{
string username = txtUserName.Text.Trim();
string strConnection = "server=.;database=MySchool;uid=sa;pwd=guo";
string strSql = &