ASP.NET问题 非常急 登录后台提示: 对象名 'admin' 无效。
ASP.NET,3.5,数据库2005 ,问题 非常急 登录后台提示: 对象名 'admin' 无效。
这是Class1.cs
//定义方法 通过用户名和密码来判断用户名是否存在在 public bool getAdminByNameAndPwd(string name, string pwd) {
DAL.DataBase d = new DAL.DataBase();
object o;
d.runSQL("select * from admin where userNName='" + name + "' and userNPwd='" + MD.MD52(pwd) + "'", out o);
d.close();
return o == null ? false : true;
}
这是web.config
<add name="str" connectionString="Data Source=116.255.188.245;User ID=chuangtian;Password=3361004peng;" />
sql拼接 看过去还没过滤的样纸
看看表admin是否存在,
[解决办法]
连接字符串没有指定数据库?
[解决办法]
[解决办法]
sql.Append(",@Path,@IsRecommanded,@IsHidden,@MetaKeywords,@MetaDescription,@ClassPicUrl,@Memo,@Year,@Area,@Class,@Actor,@Director,@TypeIds)");
sql.Append(" ;SELECT @NewId=@@IDENTITY");
SqlParameter[] parameters = {
new SqlParameter("@Name",SqlDbType.NVarChar,20),
new SqlParameter("@Intro",SqlDbType.NVarChar,200),
new SqlParameter("@ParentId",SqlDbType.Int),
new SqlParameter("@RootId",SqlDbType.Int),
new SqlParameter("@OrderId",SqlDbType.Int),
new SqlParameter("@GlobalOrder",SqlDbType.VarChar,100),
new SqlParameter("@Depth",SqlDbType.Int),
new SqlParameter("@Path",SqlDbType.VarChar,100),
new SqlParameter("@IsRecommanded",SqlDbType.Bit),
new SqlParameter("@IsHidden",SqlDbType.Bit),
new SqlParameter("@MetaKeywords",SqlDbType.NVarChar,200),
new SqlParameter("@MetaDescription",SqlDbType.NVarChar,500),
new SqlParameter("@ClassPicUrl",SqlDbType.VarChar,100),
new SqlParameter("@Memo",SqlDbType.NVarChar,200),
new SqlParameter("@NewId",SqlDbType.Int),
new SqlParameter("@Year",SqlDbType.VarChar,100),
new SqlParameter("@Area",SqlDbType.VarChar,100),
new SqlParameter("@Class",SqlDbType.VarChar,100),
new SqlParameter("@Actor",SqlDbType.VarChar,100),
new SqlParameter("@Director",SqlDbType.VarChar,100),
new SqlParameter("@TypeIds",SqlDbType.VarChar,100),
};
parameters[0].Value = column.Name;
parameters[1].Value = column.Intro;
parameters[2].Value = column.ParentId;
parameters[3].Value = column.RootId;
parameters[4].Value = column.OrderId;
parameters[5].Value = column.GlobalOrder;
parameters[6].Value = column.Depth;
parameters[7].Value = column.Path;
parameters[8].Value = column.IsRecommanded;
parameters[9].Value = column.IsHidden;
parameters[10].Value = column.MetaKeywords;
parameters[11].Value = column.MetaDescription;
parameters[12].Value = column.ClassPicUrl;
parameters[13].Value = column.Memo;
parameters[14].Direction = ParameterDirection.Output; //输出参数,本次生成的新Id
parameters[15].Value = column.Year;
parameters[16].Value = column.Area;
parameters[17].Value = column.Class;
parameters[18].Value = column.Actor;
parameters[19].Value = column.Director;
parameters[20].Value = column.TypeIds;
//添加到数据库中
SQLHelper.ExecuteNonQuery(sql.ToString(),parameters);
//获取输出参数并返回
if (parameters[14].Value == DBNull.Value)
{
return -901; //数据库错误
}
else
{
return (int)(parameters[14].Value);
}
}
sql拼接一定要规范
[解决办法]
[admin] --这样试试
d.runSQL("select * from [admin] where userNName='" + name + "' and userNPwd='" + MD.MD52(pwd) + "'", out o);
[解决办法]
这也太……好歹也把ip给改了啊
如果你老板看到你一定会……懂的