System.Data.SqlClient.SqlException: ' ' 附近有语法错误。

Question

源代码：
string strUserName = TextBox1.Text.Trim();
string strpswd = TextBox2.Text.Trim();
String conString = "Server=PC-20111224ZARY;DataBase=yonghuming;user id=sa;password=sa"; SqlConnection conn = new SqlConnection(conString);
conn.Open();
string sql = "select * from yonghuminginfo where strUserName='" + strUserName + "' and strpswd ='" + strpswd + "'";
SqlCommand comd = new SqlCommand(sql, conn);
int rows = comd.ExecuteNonQuery();
if (rows ==1)
{ Response.Redirect("left.aspx"); }
else { Response.Redirect("Default.aspx"); }
conn.Close();
}

int rows = comd.ExecuteNonQuery(); 这个代码报错啊、？？？

Answer 1

初步判断，
1、你SQL语句字符串拼接没有问题，
2、问题估计出在你的两个参数上：strUserName、strpswd,你应该单步调试一下，看这两个参数值是否正确