用户登陆操作(ASP.NET)

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Data.SqlClient;

namespace DataOperator
...{
    /**//// <summary>
    /// Login 的摘要说明
    /// </summary>
    public class Login
    ...{
        /**//// <summary>
        /// 数据库联接字符串
        /// </summary>
        private string connstring;
        /**//// <summary>
        /// 数据库联接字符串
        /// </summary>
        public string Connstring
        ...{
            set
            ...{
                connstring = value;
            }
        }
        /**//// <summary>
        /// 用户登陆操作类
        /// </summary>
        public Login()
        ...{
            //
            // TODO: 在此处添加构造函数逻辑
            //
        }
        /**//// <summary>
        /// 检测用户登陆是否合法
        /// </summary>
        /// <param name="UserName"></param>
        /// <param name="PassWords"></param>
        /// <returns></returns>
        public string checkLogin(string UserName, string PassWords)
        ...{
            SqlConnection Conn = new SqlConnection(connstring);
            SqlCommand Comm = new SqlCommand("pr_login", Conn);
            Comm.CommandType = CommandType.StoredProcedure;
            Comm.Parameters.Add(new SqlParameter("@UserName", UserName));
            Comm.Parameters.Add(new SqlParameter("@PassWords", PassWords));
            Comm.Parameters.Add(new SqlParameter("@result", SqlDbType.VarChar, 50));
            Comm.Parameters["@result"].Direction = ParameterDirection.Output;
            Conn.Open();
            Comm.ExecuteNonQuery();
            Conn.Close();
            return (string)(Comm.Parameters["@result"].Value);
        }
    }
}

create table TSTUSERS
(
    UserName varchar(50) primary key,
    PassWords varchar(50) not null
)
GO
insert into TSTUSERS values('test','test')
GO
CREATE  proc  pr_login
@UserName varchar(50),                --UserName
@PassWords varchar(50),               --PassWord
@result varchar(50) output          --Result
as
select * from TSTUSERS where UserName=@UserName
if(@@rowcount<1)
   begin 
     set @result='UserName Error'
   end
else
   begin 
     select * from TSTUSERS where (UserName=@UserName)and(PassWords=@PassWords)
     if(@@rowcount<1)
        begin 
          set @result='PassWord Error'
        end
     else 
        begin
          set @result='ACCESS'
        end
   end
return