C#操作数据库存储过程 用户登录验证

//C#操作数据库存储过程 用户登录验证

protected void btnLogin_Click(object sender, EventArgs e)
    {
        sqlconn.Open();

        SqlCommand sqlcom = new SqlCommand("proMemberInfo", sqlconn);

        sqlcom.CommandType = CommandType.StoredProcedure;

        sqlcom.Parameters.Add("@MemberName", SqlDbType.VarChar, 20).Value = txtMName.Text.Trim();

        sqlcom.Parameters.Add("@MemberPwd", SqlDbType.VarChar, 20).Value = txtMPwd.Text.Trim();

        SqlDataReader read = sqlcom.ExecuteReader();

        if (read.Read())
        {
            Panel1.Visible = true;
            Panel2.Visible = false;
            MName.Text = txtMName.Text;
            Session["MName"] = txtMName.Text.Trim();
        }
        else
        {
            Response.Write("<script>alert('您输入的用户名或密码错误，请重新输入！');location='javascript:history.go(-1)';</script>");
        }
    }

set ANSI_NULLS ON
set QUOTED_IDENTIFIER ON
go

ALTER PROCEDURE [dbo].[proMemberInfo]
(@MemberName varchar(20),@MemberPwd varchar(20))
as
select * from tb_Member where MemberName=@MemberName and MemberPwd=@MemberPwd