我有一個項目,我想發送忘記的密碼郵件,但我無法從數據庫中找到用戶名和密碼,它正在發送像UserName這樣的空白郵件:和密碼:我想從中找到用戶名和密碼在提前3次架構的感謝,這是我的代碼數據的基礎上....如何從數據庫中找到忘記的密碼?
protected void Button1_Click(object sender, EventArgs e)
{
int id = MyRegistration.fgusername(txt_Email.Text.Trim());
if (id > 0)
{
string sQuery = "Select UserName, Password From Registration Where EmailID = '" + txt_Email.Text + "'";
DataSet ds =DataAccessLayer.ExeSelectQuery(sQuery);
try
{
string sUserName = "";
string sPassword = "";
sendMail(sUserName, sPassword);
}
catch (Exception ex) { }
}
else { label1.Text = "Invalid User"; }
}
數據訪問層:
public static int fgusername(string sEmailId)
{
int id1 = 0;
string selectstr = "SELECT UserName, Password FROM Registration WHERE EmailID = '" + sEmailId.Trim() + "'";
id1 = DataAccessLayer.ExecuteReader(selectstr);
return id1;
}
在發送郵件之前,您只將sUserName和sPassword設置爲空白。 – Popeye 2013-03-18 06:44:28
危險:SQL注入! ;-) – 2013-03-18 06:47:03
如何從選擇用戶名和密碼的查詢中接收ID? (檢查'fgusername'方法) – Damith 2013-03-18 07:05:37