使用存储过程登录Asp.net

Question

我使用asp.net创建登录页面;在调试中，我看到正确的输入数据，但即使有效，我也会不断收到错误消息“无效的用户名或密码”。我还使用值执行存储过程并显示正确的结果。我不确定发生了什么。

 protected void login_Click(object sender, EventArgs e)
        {
            String username = txtUserName.Text.ToString();
            String password = txtPassword.Text;
            string con = ConfigurationManager.ConnectionStrings["LoginConnectionString"].ToString();
            SqlConnection connection = new SqlConnection(con);
            connection.Open();

        string passwords = encryption(password);

        SqlCommand cmd1 = new SqlCommand("spLogin", connection);
        cmd1.CommandType = CommandType.StoredProcedure;


        cmd1.Parameters.AddWithValue("@UserName", username);
        cmd1.Parameters.AddWithValue("@password", passwords);
        SqlDataReader sqldr = cmd1.ExecuteReader();
        if (sqldr.Read())
        {
            Session["UserName"] = username.ToUpper();
            Response.Redirect("~/Home/Welcome.aspx");
        }
        else
        {
            lblError.Text = "Invalid Username or Password";

        }

        connection.Close();
        sqldr.Close();

    }

StoredProcedure的

    select * from Users u  where UserName=@UserName and password=@password