sql读出参数问题

我从数据库里查询到一个字段如：
string UserRight;

string checkSql = "select UserRight from UserInfo where Login='" + Login + "' and Password='" + Password + "'";

SqlCommand checkCmd=new SqlCommand(checkSql,conn);

SqlDataReader checkDr;

checkDr = cmd.ExecuteReader();

我怎么样才能把查询到的UserRight传递到定义的字符串上面呢？

cmd.ExecuteReader()["UserRight "].toString()就是你取到的值

如果就有一个记录的话
string UserRight;

string checkSql = "select UserRight from UserInfo where Login='" + Login + "' and Password='" + Password + "'";

SqlCommand checkCmd=new SqlCommand(checkSql,conn);

SqlDataReader checkDr;

checkDr = cmd.ExecuteReader();
while(checkDr.Read())
{
  UserRight=checkDr["UserRight "].ToString();
}
 checkCmd.Dispose();
checkDr.Close();

如果就有多条个记录的话
string UserRight;

string checkSql = "select UserRight from UserInfo where Login='" + Login + "' and Password='" + Password + "'";

SqlCommand checkCmd=new SqlCommand(checkSql,conn);

SqlDataReader checkDr;

checkDr = cmd.ExecuteReader();
while(checkDr.Read())
{
  UserRight+=checkDr["UserRight "].ToString();
}
 checkCmd.Dispose();
checkDr.Close();