¹ØÓÚasp.netÓû§µÇ¼ȨÏÞ´úÂë

ÎÒÔÚ×öͼÊé¹ÜÀíϵͳ£¬Óû§¹ÜÀíȨÏÞ£¬ÔÚasp¡£netÀ²»ÓÃsessionµÄ»°£¬Ó¦¸ÃÓÃʲô´úÂë
protected void Page_Load(object sender, EventArgs e)
    {
        try
        {
            SqlConnection con = new SqlConnection();
            con.ConnectionString = "server=.\\sqlexpress;database=DB_Library;uid=sa;pwd=sa123";
            string strSql = "select *from manage where username='" + txtname.Text + "'and password='" + txtpwd.Text + "'";
            con.Open();
            SqlCommand cmd = new SqlCommand(strSql, con);
                  con.Close();
        }
        catch (SqlException sqle)
        {
        }
    }
    protected void btnOk_Click(object sender, EventArgs e)
    {
        string name = txtname.Text;
        string pwd = txtpwd.Text;
        bool i = db.CheckUser(name, pwd);
        
        if (i>0  )
        {              
                    Response.Write("<script language=javascript>alert('µÇ¼³É¹¦£¡'); location='libararyma