合法用户验证函数(用于登录页面)

/// <summary>
  /// 用户验证
  /// </summary>
///ex:Session["userid"]=sjmain.US.smis.Functions.EncryptCookie(username.Value.Trim(),1);
 ///Session["userpwd"]=sjmain.US.smis.Functions.EncryptCookie(password.Value.Trim(),2);
  public static bool validate(string userid, string password)
  {
   try
   {
    if(userid.Trim().ToLower()!=userid.Trim())return false;

    SqlDataReader reader=getReader("SELECT 密码 FROM userinfo Where 用户号='"+ userid.Trim() + "'");
    if(reader.Read())
    {
     if(reader.GetValue(0).ToString().Trim()==Functions.Encrypt(password,1).Trim())
     {
      reader.Close();
      return true;
     }
     else
     {
      reader.Close();
      return false;
     }
    }
    else
    {
     reader.Close();
     return false;
    }  
   }
   catch
   {
    return false;
   }
  }
备注:getReader函数见"数据库操作"一文.