在哪里可以添加Respons.Redirect？

Question

我想弄清楚在哪里添加我的Response.Redirect（“userAdmin.aspx）到我的代码。我已经尝试了很多不同的变体，但提交按钮什么都不做。谁能帮助？我将不胜感激！

这里是我的代码

Protected Sub butSubmit_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles butSubmit.Click 

    Dim myReader As Data.SqlClient.SqlDataReader 
    Dim mySqlConnection As Data.SqlClient.SqlConnection 
    Dim mySqlCommand As Data.SqlClient.SqlCommand 
    'Establish the SqlConnection by using the configuration manager to get the connection string in our web.config file. 

    mySqlConnection = New Data.SqlClient.SqlConnection(ConfigurationManager.ConnectionStrings ("ConnectionString").ToString()) 
    Dim sql As String = "SELECT password FROM MyUsers WHERE username = '" & Me.TextBox1.Text & "'" 
    mySqlCommand = New Data.SqlClient.SqlCommand(sql, mySqlConnection) 



    Try 

     mySqlConnection.Open() 
     myReader = mySqlCommand.ExecuteReader() 

     If (myReader.HasRows) Then 
      myReader.Read() 
      Dim password As String = myReader("password") 
      If (password = Me.TextBox2.Text) Then 
       'Open page with users and roles 
       Dim message As String = "Correct password" 
       Dim style As MsgBoxStyle = MsgBoxStyle.OkOnly 
       Dim title As String = "Authenticated" 
       MsgBox(message, style, title) 

      End If 
     End If 

    Catch ex As Exception 
     Console.WriteLine(ex.ToString()) 
    Finally 
     If Not (myReader Is Nothing) Then 
      myReader.Close() 
     End If 

     If (mySqlConnection.State = Data.ConnectionState.Open) Then 
      mySqlConnection.Close() 
     End If 

    End Try 

End Sub 

Answer 1

protected void Button_Click(object sender,ClickEventArgs e) 
    { 
     Response.Redirect("userAdmin.aspx) ; 
    } 

弗里斯特尝试一下本作另一个按钮，看看页面被重定向或不..如果你没有蚂蚁问题然后根据您的标准最后或最后放置

Answer 2

您应该在Try-Catch之外使用Response.Redirect，否则您将获得ThreadAbortException。您也可以使用过载Response.Redirect(url, false)。

您应该为使用参数 for your sql-command to prevent sql-injection！

Protected Sub butSubmit_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles butSubmit.Click 
    Dim correctPassword As Boolean = False 
    Using mySqlConnection = New Data.SqlClient.SqlConnection(ConfigurationManager.ConnectionStrings("ConnectionString").ConnectionString) 
     Dim sql As String = "SELECT password FROM MyUsers WHERE username = @userName" 
     Using mySqlCommand = New Data.SqlClient.SqlCommand(sql, mySqlConnection) 
      mySqlCommand.Parameters.AddWithValue("@userName", Me.TextBox1.Text) 
      Try 
       mySqlConnection.Open() 
       Using myReader = mySqlCommand.ExecuteReader() 
        If myReader.Read() Then 
         Dim password As String = myReader.GetString(myReader.GetOrdinal("password")) 
         If password = Me.TextBox2.Text Then 
          correctPassword = True 
         End If 
        End If 
       End Using 
      Catch ex As Exception 
       Console.WriteLine(ex.ToString()) 
      End Try 
     End Using 
    End Using 
    If correctPassword Then 
     Response.Redirect("userAdmin.aspx") 
    End If 
End Sub 

我也强烈建议使用ASP.NET-Membership来代替。