2012-04-25 137 views
0

嗨我完全失去了这段代码(也非常新)我试图在else语句后创建一个会话。你如何创建一个会话,并让它被另一个文件读取?vb登录会话

Dim conn As MySqlConnection 
    'connect to DB 
    conn = New MySqlConnection() 
    conn.ConnectionString = "server=localhost;Port=3306; user id=****; password=****; database=testtable" 
    'see if connection failed. 
    Try 
     conn.Open() 
    Catch myerror As MySqlException 
     MessageBox.Show("Error Connection to Database: " & myerror.Message) 
    End Try 
    'sql query 
    Dim myAdapter As New MySqlDataAdapter 

    Dim sqlquery = "SELECT * FROM members Where login='" & UsernameTextBox.Text & "' and passwd='" & PasswordTextBox.Text & "'" 
    Dim myCommand As New MySqlCommand() 
    myCommand.Connection = conn 
    myCommand.CommandText = sqlquery 
    'start query 
    myAdapter.SelectCommand = myCommand 
    Dim myData As MySqlDataReader 
    myData = myCommand.ExecuteReader() 
    'see if user exits. 
    If myData.HasRows = 0 Then 



     MessageBox.Show("Invalid Username/Password", "Login Error", MessageBoxButtons.OK, MessageBoxIcon.Error) 
    Else 


     Dim login As String = System.Web.HttpContext.Current.Session("login") 
     System.Web.HttpContext.Current.Session("login") = UsernameTextBox.Text 



     Dim Form1 = New Form1 
     Form1.Show() 
     Me.Visible = False 
    End If 

感谢所有帮助

+3

您有一个SQL注入漏洞。 – SLaks 2012-04-25 12:54:46

+0

Metro?的WinForms? WPF? Silverlight的? ASP.Net? MonoTouch的? – SLaks 2012-04-25 12:55:10

+0

我知道我有漏洞,但这仅仅是为了我学习 – user1356182 2012-04-25 13:04:39

回答

0

会议只在ASP.Net存在。

您应该在构造函数参数和/或表单类的属性中传递信息。