ASP.NET C# 实现多文件上传与数据库存储权限控制

//代码
using System;
using System.Collections.Generic;

using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;

using System.Data;
using System.Configuration;
using System.Collections;

using System.Web.Security;


using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;









public partial class upload: System.Web.UI.Page
{
    protected void UploadButton_Click(object sender, EventArgs e)

    {
        SqlConnection conn = new SqlConnection();
        conn.ConnectionString = "server=.;Uid=sa;Pwd=123;database=`jxwd";//连接数据库
        conn.Open();
        SqlCommand comm = new SqlCommand();
        ///'遍历File表单元素
        HttpFileCollection files = HttpContext.Current.Request.Files;

        /// '状态信息
        System.Text.StringBuilder strMsg = new System.Text.StringBuilder("上传成功！您输入的用户名是：" + TextBox1.Text + "
");

        comm.CommandText = "select * from 用户信息表 where 用户名='" + TextBox1.Text.Trim() + "'and 密码='" + TextBox2.Text.Trim() + "'and 用户属性='" + TextBox3.Text.Trim() + "'";
        comm.Connection = conn;
        SqlDataReader dr = comm.ExecuteReader();
        if (TextBox3.Text.Trim() == "教师")
        {

            if (dr.Read())
            {
                Session["用户名"] = TextBox1.Text.Trim();


                //strMsg.Append("上传的文件分别是：<hr color='red'/>");
                try
                {
                    for (int iFile = 0; iFile < files.Count; iFile++)
                    {
                        ///'检查文件扩展名字
                        HttpPostedFile postedFile = files[iFile];
                        string fileName, fileExtension;