OracleConnection con = new OracleConnection(strConn);

con.Open();

OracleCommand cmd = new OracleCommand(sql,con);

OracleDataReader a = cmd.ExecuteReader();

if (a.Read())

{

string User_ID = a[0].ToString();

string User_Name = a[1].ToString();

string sql2 = "select * from bs_appuserrole t where t.appuser_id='"+ User_ID +"'";

OracleConnection con1 = new OracleConnection(strConn);

con1.Open();

OracleCommand cmd1 = new OracleCommand(sql2);

OracleDataReader a2 = cmd.ExecuteReader();

if (a2.Read())

{

Session["User_ID"] = a2[0];

}

con1.Close();

con1.Dispose();

Response.Redirect("manageWarehouse.aspx");

}

else

{

ScriptManager.RegisterStartupScript(this.UpdatePanel1, Page.GetType(), System.DateTime.Now.Ticks.ToString(), "alert('身份不對或密碼錯誤！');", true);

}

con.Close();

con.Dispose();