rs=sm.executeQuery("select top 1 * from [user] where username='" +u+"'and password='"+p+"'"); u后面应该是"' "
