牛腩购物5 aspnetpager控件的巩固（屏蔽恶意字符过滤转换 单引号问题，制作新闻页面）

过滤非法字符串（但是查询的时候，假如是英文名字，是很容易有单引号的  例如 Joey’s name,这个时候我们就需要把单引号，换成2个单引号

/// <summary>过滤sql非法字符串

        /// 

        /// </summary>

        /// <param name="value"></param>

        /// <returns></returns>

        public static string GetSafeSQL(string value)

        {

            if (string.IsNullOrEmpty(value))

                return string.Empty;

            value = Regex.Replace(value, @";", string.Empty);

            //value = Regex.Replace(value, @"'", string.Empty);

            value = Regex.Replace(value, @"'", "''");

            value = Regex.Replace(value, @"&", string.Empty);

            value = Regex.Replace(value, @"%20", string.Empty);

            value = Regex.Replace(value, @"--", string.Empty);

            value = Regex.Replace(value, @"==", string.Empty);

            value = Regex.Replace(value, @"<", string.Empty);

            value = Regex.Replace(value, @">", string.Empty);

            value = Regex.Replace(value, @"%", string.Empty);

            return value;

        }

接下来我们制作 新闻表和前台的新闻制作。

shop_news：id,title,body,visitnum,createdate,type

          新闻id，标题，内容，浏览量，创建时间，新闻类型（商品专题或者是新闻中心）

要学会代码的复用，ctrl + c  , Ctrl + v

/*********************************************************

 * 开发人员：Joey  QQ:1727050508   博客: http://1727050508.cnblogs.com

 * 创建时间：2012-3-5 10:39:42

 * 描述说明：news_list.aspx  新闻列表页

 * 

 * 更改历史：

 * 

 * *******************************************************/

using System;

using System.Collections.Generic;

using System.Linq;

using System.Web;

using System.Web.UI;

using System.Web.UI.WebControls;



namespace Niunan.Shop.Web.admin

{

    public partial class news_list : System.Web.UI.Page

    {

        Niunan.Shop.DAL.NewsDAO newsdao = new DAL.NewsDAO();

        protected void Page_Load(object sender, EventArgs e)

        {

            BindRep();

        }



        protected void anp_PageChanged(object sender, EventArgs e)

        {

            BindRep();

        }

        protected void lbtnDel_Click(object sender, EventArgs e)

        {

            string id = (sender as LinkButton).CommandArgument;

            newsdao.Delete(int.Parse(id));

            BindRep();

        }



        private void BindRep()

        {

            int pagesize = anp.PageSize;

            int pageindex = anp.CurrentPageIndex;

            anp.RecordCount = newsdao.ClacCount(GetCond());

            repList.DataSource = newsdao.GetList("*", "id", "desc", pagesize, pageindex, GetCond());



            repList.DataBind();

        }



        private string GetCond()

        {

            string cond = "1=1";



            string type = Request.QueryString["type"];

            if (!string.IsNullOrEmpty(type) && type == "spzt")

            {

                cond += " and type='商品专题'";

                litH1.Text = "商品专题";

            }

            else

            {

                cond += " and type='新闻中心'";

                litH1.Text = "新闻中心";

            }





            string key = txtKey.Text.Trim();

            key = Niunan.Shop.Utility.Tool.GetSafeSQL(key);

            if (key.Length != 0)

            {

                cond+= " and title like  '%" + key + "%' ";

            }

            return cond;

        }



        protected void btnSearch_Click(object sender, EventArgs e)

        {

            BindRep();

        }

    }

}

下面是新闻添加和修改页面的代码

/*********************************************************

 * 开发人员：Joey  QQ:1727050508   博客: http://1727050508.cnblogs.com

 * 创建时间：2012-3-5 15:30:56

 * 描述说明：news_add.aspx  新闻添加和修改页面

 * 

 * 更改历史：

 * 

 * *******************************************************/

using System;

using System.Collections.Generic;

using System.Linq;

using System.Web;

using System.Web.UI;

using System.Web.UI.WebControls;



namespace Niunan.Shop.Web.admin

{

    public partial class news_add : System.Web.UI.Page

    {

         Niunan.Shop.DAL.NewsDAO newsdao = new DAL.NewsDAO();



        //Page_Load 是页面进入的时候执行的函数，不论是第一次进入，还是我们点了按钮回发进入，都会执行的

        protected void Page_Load(object sender, EventArgs e)

        {

            if (!Page.IsPostBack)

            {

                string id = Request.QueryString["id"];

                int x;

                if (!string.IsNullOrEmpty(id) && int.TryParse(id, out x))

                {

                    Niunan.Shop.Model.News newsmodel = newsdao.GetModel(x);

                    if (newsmodel != null)

                    {



                        txtTitle.Text = newsmodel.title;

                        txtBody.Text = newsmodel.body;

                        litH1.Text = "修改";

                        btnAdd.Text = "修改";

                    }

                }

            }



        }



        protected void btnAdd_Click(object sender, EventArgs e)

        {

            string title = txtTitle.Text.Trim();

            string body = txtBody.Text.Trim();

            string type = Request.QueryString["type"];

            if (!string.IsNullOrEmpty(type) && type == "spzt")

            {

                type = "商品专题";

            }

            else

            {

                type = "新闻中心";

            }





            if (title.Length == 0 || body.Length == 0)

            {

                litRes.Text = "<span style='color:blue'>请填写完整的信息</span>";

                return;

            }



            //如果有传入ID，那么就是修改

            string id = Request.QueryString["id"];

            int x;

            if (!string.IsNullOrEmpty(id) && int.TryParse(id, out x))

            {

                //这里是重复判断，到底根据这个ID，能不能获得这个实体

                Niunan.Shop.Model.News newsmodel = newsdao.GetModel(x);

                if (newsmodel != null)

                {

                    newsmodel.title = title;

                    newsmodel.body = body;

                    newsdao.Update(newsmodel);

                    litRes.Text = "<span style='color:red'>修改成功</span>";

                    return;

                }

            }





            //否则是添加

            int res = newsdao.Add(new Niunan.Shop.Model.News()

            {

                title = title,

                body = body,

                createdate = DateTime.Now,

                type = type,

                visitnum = 0

            });



            if (res > 0)

            {

                txtTitle.Text = "";

                txtBody.Text = "";

                litRes.Text = "<span style='color:blue'>添加成功</span>";

            }

            else

            {

                litRes.Text = "<span style='color:red'>添加失败，请联系管理员</span>";

            }



        }

    }

}