用户登录系统（二）

下面接着上面的写，下一步进行数据库具体增删改查的T-SQL语句的编写，在test.BLL中新增一个文件夹User_info用来操作数据库，UserinfoManager.cs

源码如下：

public class UserinfoManager
    {
        /// <summary>
        /// 修改数据库test中User_info数据
        /// </summary>
        /// <param name="UserID"></param>
        /// <param name="UserName"></param>
        /// <param name="UserPassword"></param>
        public static void UpdateUser(string UserID, string UserName, string UserPassword)
        {
            string sql = "update User_info set UserName='" + UserName + "', UserPassword='" + UserPassword + "' where UserID='" + UserID + "' ";
            tset.DAL.Common.SqlHelper.RunSql(sql);
        }
        /// <summary>
        /// 新增数据库test中User_info数据
        /// </summary>
        /// <param name="UserID"></param>
        /// <param name="UserName"></param>
        /// <param name="UserPassword"></param>
        public static void InsertUser(string UserID, string UserName, string UserPassword)
        {
            string sql = "insert into User_info (UserID,UserName,UserPassword) values('" + UserID + "','" + UserName + "','" + UserPassword + "') ";
            tset.DAL.Common.SqlHelper.RunSql(sql);
        }
        /// <summary>
        /// 删除数据库中test中User_info数据
        /// </summary>
        /// <param name="UserID"></param>
        public static void DeleteUser(string UserID)
        {
            string sql = "delete from User_info where UserID='" + UserID + "'";
            tset.DAL.Common.SqlHelper.RunSql(sql);
        }
        /// <summary>
        /// 查询数据库test中User_info数据
        /// </summary>
        /// <param name="UserID"></param>
        public static SqlDataReader selectUser(string UserID)
        {
            string sql = "select * from User_info where UserID='" + UserID + "'";
            return tset.DAL.Common.SqlHelper.GetReader(sql);
        }
        public static SqlDataReader userLogin(string UserID,string UserName,string UserPassword)
        {
            string sql = "select * from User_info where UserID='"+UserID+"' and UserName='"+UserName+"' and UserPassword='"+UserPassword+"'";
            return tset.DAL.Common.SqlHelper.GetReader(sql);
        }
        public static SqlDataReader selectUserLike(string UserID, string UserName, string UserPassword)
        {
            string sql = "select * from User_info where userID like '%" + UserID + "%' or username like '%" + UserName + "%'or UserPassword like '%" + UserPassword + "%'";
            return tset.DAL.Common.SqlHelper.GetReader(sql);
        }
        /// <summary>
        /// 查询数据datatable
        /// </summary>
        public static DataTable getUserTable()
        {
            string sql = "select * from User_info";
            return tset.DAL.Common.SqlHelper.GetTable(sql);
        }
        public static DataTable getConditionUserTable(string UserID, string UserName, string UserPassword)
        {
            string sql = "select * from User_info where userID like '%" + UserID + "%' or username like '%" + UserName + "%'or UserPassword like '%" + UserPassword + "%'";
            return tset.DAL.Common.SqlHelper.GetTable(sql);
        }