带参数的sql语句

1.SQLServer

代码

 private static SqlConnection conn = new SqlConnection("server=(local);Integrated Security=SSPI;database=JSFguanliDB;");
private static SqlDataAdapter da;
private static SqlCommand cmd;
/// <summary>
/// 登陆操作
/// </summary>
/// <param name="userName">用户名</param>
/// <param name="passWord">密码</param>
/// <returns>是否成功</returns>
        static public bool UserLogin(string userName, string passWord)
        {
            cmd = new SqlCommand("select yonghuming, yonghumima from denglubiao where yonghuming=@username and yonghumima=@passwd ", conn);
            SqlParameter param = cmd.Parameters.Add("@username", SqlDbType.NVarChar, 50);
            param.Value = userName;
            param = cmd.Parameters.Add("@passwd", SqlDbType.NVarChar, 50);
            param.Value = passWord;

            conn.Open();
            SqlDataReader rdr = cmd.ExecuteReader();

bool login = false;

try
            {
if (rdr.HasRows)
                    login = true;
            }
catch
            {
                login = false;
            }
finally
            {
                conn.Close();
            }
return login;

        }

2.Access

代码

  private static OleDbConnection conn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; " +
"Data Source=JSFguanliDB.mdb");
private static OleDbDataAdapter da;
private static OleDbCommand cmd;
/// <summary>
/// 登陆操作
/// </summary>
/// <param name="userName">用户名</param>
/// <param name="passWord">密码</param>
/// <returns>是否成功</returns>
        static public bool UserLogin(string userName, string passWord)
        {
            cmd = new OleDbCommand("select yonghuming, yonghumima from denglubiao where yonghuming=@username and yonghumima=@passwd ", conn);
            OleDbParameter param = cmd.Parameters.Add("@username", OleDbType.VarChar, 50);
            param.Value = userName;
            param = cmd.Parameters.Add("@passwd", OleDbType.VarChar, 50);
            param.Value = passWord;

            conn.Open();
            OleDbDataReader rdr = cmd.ExecuteReader();

bool login = false;

try
            {
if (rdr.HasRows)
                    login = true;
            }
catch
            {
                login = false;
            }
finally
            {
                conn.Close();
            }
return login;

        }