如何使登录表单区分大小写

Question

我用登录表单创建了一个简单的程序。 它以非常简单的方式工作，但是我观察到登录时并不区分大小写。 例如，如果我的用户名是Test而我将使用test登录，则该用户名仍然会被接受。

SqlConnection connect = new SqlConnection("Data Source=LAFAYETTE-PC;Initial Catalog=Thesis;Integrated Security=True");
connect.Open();
SqlCommand command = new SqlCommand("SELECT * FROM AdminCredentials WHERE Username = '" + LogInUsername.Text + "' AND Password  = '" + LogInPassword.Text + "' ", connect);
SqlDataReader reader;
reader = command.ExecuteReader();
int count = 0;
while (reader.Read())
{
    count += 1;
}

if (count == 1)
{
    MessageBox.Show("Successfully Logged In!");
    MainForm form2 = new MainForm();
    form2.ShowDialog();
}
else if (count > 0)
{
    MessageBox.Show("Incorrect username and passsword");
}
else
{
    MessageBox.Show("Username or password is incorrect");

}

有任何想法吗？ 帮助将不胜感激！

Answer 1

在您的查询中附加“ COLLATE Latin1_GENERAL_CS_AS”

new SqlCommand("SELECT * FROM AdminCredentials WHERE Username = '" + LogInUsername.Text + "' AND Password  = '" + LogInPassword.Text + "'  COLLATE Latin1_GENERAL_CS_AS"

并阅读有关Sql Injection的信息...