求助登录验证模块

using System;
using System.Collections;
using
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

namespace LiuYanBan
{
    /// <summary>
    /// WebForm1 的摘要说明。
    /// </summary>
    public class WebForm1 : System.Web.UI.Page
    {
        protected System.Web.UI.WebControls.Label Label1;
        protected System.Web.UI.WebControls.Label Label2;
        protected System.Web.UI.WebControls.TextBox TextBox1;
        protected System.Web.UI.WebControls.TextBox TextBox2;
        protected System.Web.UI.WebControls.Button Button1;
        protected System.Web.UI.WebControls.Button Button2;
        protected System.Web.UI.WebControls.LinkButton LinkButton1;
        protected System.Web.UI.WebControls.Label Label3;
    
        private void Page_Load(object sender, System.EventArgs e)
        {
            // 在此处放置用户代码以初始化页面
        }

        #region Web 窗体设计器生成的代码
        override protected void OnInit(EventArgs e)
        {
            //
            // CODEGEN: 该调用是 Web 窗体设计器所必需的。
            //
            InitializeComponent();
            base.OnInit(e);
        }
        
        /// <summary>
        /// 设计器支持所需的方法 - 不要使用代码编辑器修改
        /// 此方法的内容。
        /// </summary>
        private void InitializeComponent()
        {   
            this.Button1.Click += new System.EventHandler(this.Button1_Click);
            this.Button2.Click += new System.EventHandler(this.Button2_Click);
            this.LinkButton1.Click += new System.EventHandler(this.LinkButton1_Click);
            this.Load += new System.EventHandler(this.Page_Load);

        }
        #endregion

        private void Button1_Click(object sender, System.EventArgs e)
       {
            try
            {
                //进行数据库的连接
                string strconn="server=E4D8FD724D41443;uid=sa;pwd=sa;database=DataBase";
                string strcmd="select count(*) from User where (UserName like '" +TextBox1.Text+ " ' and Pwd like'" +TextBox2.Text+ "')";
                //string strCmd = "select count(*) from book where (name like'" + TextBox1.Text + "' and password like'" + TextBox2.Text + "')";

                SqlConnection myconnection=new SqlConnection();
                myconnection.ConnectionString=strconn;
                SqlCommand mycommand=new SqlCommand(strcmd,myconnection);
                mycommand.Connection.Open();
                int flag=(int)mycommand.ExecuteScalar();
                mycommand.Connection.Close();
                myconnection.Close();

                if(flag>0)//用户存在的话
                {
                    Session["UserName"]=TextBox1.Text;
                    Response.Redirect("WebForm3.aspx");            
                }
                else
                {
                    Label3.Text="对不起！用户名密码不符";
                    TextBox1.Text="";
                    TextBox2.Text="";            
                }
            }
            catch
            {
                    Label3.Text="出现问题了";            
            }






        }