小常识(十一)

小知识(十一)

1.有时为防止SQL注入需要过滤字符，如对Request.QueryString[]查询字符串的过滤：

 /// <summary>        /// 过滤字符        /// </summary>        /// <param name="Input"></param>        /// <returns></returns>        public static string Filter(string sInput)        {            if (sInput == null || sInput == "")                return null;            string sInput1 = sInput.ToLower();            string output = sInput;            string pattern = @"*|and|exec|insert|select|delete|update|count|master|truncate|declare|char(|mid(|chr(|'";            if (Regex.Match(sInput1, Regex.Escape(pattern), RegexOptions.Compiled | RegexOptions.IgnoreCase).Success)            {                throw new Exception("字符串中含有非法字符!");            }            else            {                output = output.Replace("'", "''");            }            return output;        }

?

2. 让TextBox里的文字换行

<asp:TextBox ID="txt" TextMode="MultiLine" runat="server" Width="600" Height="100"></asp:TextBox>

把TextBox的TextMode设为MultiLine ? 用\r\n换行 ? txt.Text="我是第一行\r\n"+"我是第二行\r\n";

?

3. 为repeater等控件绑定的数据添加一列，这一列可以是删除，详细等

//dt是已经从数据库中读出来的数据，准备绑定到repeater控件上         if (dt != null)            {                if (dt.Rows.Count > 0)                {                    //添加列                    dt.Columns.Add("op", typeof(string));                    //添加操作列                    for (int k = 0; dt.Rows.Count > k; k++)                    {                        dt.Rows[k]["op"] = "<a href="tbData_YH_Detail_list.aspx?Id=" + dt.Rows[k]["id"] + "" class='list_link'>详细</a>&nbsp;&nbsp;<a href="tbData_YH.aspx?Type=ShenHe&Id=" + dt.Rows[k]["id"] + "" class='list_link'>审核</a>&nbsp;&nbsp;<a href="tbData_YH_update.aspx?Id=" + dt.Rows[k]["id"] + "" class='list_link'>修改</a>&nbsp;&nbsp;<a href="tbData_YH.aspx?Type=Del&id=" + dt.Rows[k]["id"] + "" class='list_link' alt='删除' onClick="{if(confirm('确定要删除吗？')){return true;}return false;}">删除</a>&nbsp;&nbsp;<input type="checkbox" name="aid" value="" + dt.Rows[k]["id"] + "" />";                    }                }            }            repeater1.DataSource = dt;              repeater1.DataBind(); 

?

        <ItemTemplate>                <tr  onmouseover="overColor(this)" onmouseout="outColor(this)">                    <td align="center" valign="middle" ><%#((DataRowView)Container.DataItem)["ID"]%></td>                    <td align="center" valign="middle" ><%#((DataRowView)Container.DataItem)["tbDanWei"]%></td>                    <td align="center" valign="middle" ><%#((DataRowView)Container.DataItem)["tbTime"]%></td>                    <td align="center" valign="middle" ><%#((DataRowView)Container.DataItem)["sbND"]%></td>                    <td align="center" valign="middle" ><%#((DataRowView)Container.DataItem)["shenHeFlag"]%></td>                    <td align="center" valign="middle" ><%#((DataRowView)Container.DataItem)["op"]%></td>                </tr>           </ItemTemplate>

4.<%%>与runat="server"控制元素的显示与否

<form id="form1" runat="server">    <%if (visible){%>    <div>     <table>    <tr><td>1111</td></tr>    </table>    </div>    <%}%>    <hr />    <div runat="server" id="div2">    <table>    <tr><td>2222</td></tr>    </table>    </div>     <asp:Button ID="Button2" runat="server" Text="显示" onclick="Button2_Click"/>    <asp:Button ID="Button1" runat="server" Text="隐藏" onclick="Button1_Click" />    </form>

        protected bool visible = true;        protected void Button1_Click(object sender, EventArgs e)        {            visible = false;            div2.Visible = false;        }        protected void Button2_Click(object sender, EventArgs e)        {            visible = true;            div2.Visible = true;        }

?

?

?

?