ASP.NET开发Web常用函数公共类
using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using System.Security.Cryptography;
using System.Text;
/// <summary>
/// CommonClass 的摘要说明
/// </summary>
public class CommonClass
{
public CommonClass()
{
//
// TODO: 在此处添加构造函数逻辑
//
}
/// <summary>
/// 连接数据库
/// </summary>
/// <returns>返回SqlConnection对象</returns>
public SqlConnection GetConnection()
{
string myStr = ConfigurationManager.AppSettings["ConnectionString"].ToString();
SqlConnection myConn = new SqlConnection(myStr);
return myConn;
}
/// <summary>
/// 说明：MessageBox用来在客户端弹出对话框。
/// 参数：TxtMessage 对话框中显示的内容。
/// 参数：Url 对话框关闭后，跳转的页
/// </summary>
public string MessageBox(string TxtMessage,string Url)
{
string str;
str = "<script language=javascript>alert('" + TxtMessage + "');location='" + Url + "'</script>";
return str;
}
/// <summary>
/// 说明：MessageBox用来在客户端弹出对话框。
/// 参数：TxtMessage 对话框中显示的内容。
/// </summary>
public string MessageBox(string TxtMessage)
{
string str;
str = "<script language=javascript>alert('" + TxtMessage + "')</script>";
return str;
}
/// <summary>
/// 说明：ExecSQL用来执行SQL语句。
/// 返回值：操作是否成功(True\False)。
/// 参数：sqlStr SQL字符串
/// </summary>
public Boolean ExecSQL(string sqlStr)
{
SqlConnection myConn = GetConnection();
myConn.Open();
SqlCommand myCmd = new SqlCommand(sqlStr, myConn);
try
{
myCmd.ExecuteNonQuery();
myConn.Close();
}
catch
{
myConn.Close();
return false;
}
return true;
}
/// <summary>
/// 说明：GetDataSet数据集，返回数据源的数据集
/// 返回值：数据集DataSet
/// 参数：sqlStr SQL字符串，TableName 数据表名称
/// </summary>
public System.Data.DataSet GetDataSet(string sqlStr, string TableName)
{
SqlConnection myConn =GetConnection();
myConn.Open();
SqlDataAdapter adapt = new SqlDataAdapter(sqlStr, myConn);
DataSet ds = new DataSet();
adapt.Fill(ds, TableName);
myConn.Close();
return ds;
}
/// <summary>
/// 防止SQL 注入式攻击
///
/// </summary>
/// <param name="loginName">用户登录名称</param>
/// <param name="loginPwd">用户登录密码</param>
public int checkLogin(string loginName, string loginPwd)
{
SqlConnection myConn = GetConnection();
SqlCommand myCmd = new SqlCommand("select count(*) from Administratorer where administrator_name=@loginName and administrator_password=@loginPwd", myConn);
myCmd.Parameters.Add(new SqlParameter("@loginName", SqlDbType.VarChar, 20));
myCmd.Parameters["@loginName"].Value = loginName;
myCmd.Parameters.Add(new SqlParameter("@loginPwd", SqlDbType.VarChar, 50));
myCmd.Parameters["@loginPwd"].Value = loginPwd;
myConn.Open();
int i = (int)myCmd.ExecuteScalar();
myCmd.Dispose();
myConn.Close();
return i;
}
public int checkuser(string loginName1, string loginPwd1)
{
SqlConnection myConn1 = GetConnection();
SqlCommand myCmd1 = new SqlCommand("select count(*) from Username where _user=@loginName1 and _password=@loginPwd1", myConn1);
myCmd1.Parameters.Add(new SqlParameter("@loginName1", SqlDbType.VarChar, 20));
myCmd1.Parameters["@loginName1"].Value = loginName1;
myCmd1.Parameters.Add(new SqlParameter("@loginPwd1", SqlDbType.VarChar, 50));
myCmd1.Parameters["@loginPwd1"].Value = loginPwd1;
myConn1.Open();
int t = (int)myCmd1.ExecuteScalar();
myCmd1.Dispose();
myConn1.Close();
return t;
}
/// <summary>
/// 实现随机验证码
/// </summary>
/// <param name="n">显示验证码的个数</param>
/// <returns>返回生成的随机数</returns>
public string RandomNum(int n) //
{
//定义一个包括数字、大写英文字母和小写英文字母的字符串
string strchar = "0,1,2,3,4,5,6,7,8,9,A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z";
//将strchar字符串转化为数组
//String.Split 方法返回包含此实例中的子字符串（由指定Char数组的元素分隔）的 String 数组。
string[] VcArray = strchar.Split(',');
string VNum = "";
//记录上次随机数值，尽量避免产生几个一样的随机数
int temp = -1;
//采用一个简单的算法以保证生成随机数的不同
Random rand = new Random();
for (int i = 1; i < n + 1; i++)
{
if (temp != -1)
{
//unchecked 关键字用于取消整型算术运算和转换的溢出检查。
//DateTime.Ticks 属性获取表示此实例的日期和时间的刻度数。
rand = new Random(i * temp * unchecked((int)DateTime.Now.Ticks));
}
//Random.Next 方法返回一个小于所指定最大值的非负随机数。
int t = rand.Next(61);
if (temp != -1 && temp == t)
{
return RandomNum(n);
}
temp = t;
VNum += VcArray[t];
}
return VNum;//返回生成的随机数
}
}
//执行操作得到记录条数
public int ExecteNonQuery(string sqlStr)
{
int res = 0;
SqlConnection myConn = GetConnection();
myConn.Open();
SqlCommand myCmd = new SqlCommand(sqlStr, myConn);
try
{
res=myCmd.ExecuteNonQuery();
myConn.Close();
}
catch
{
res = 0;
myConn.Close();
return res;
}
return res;
}
///
/// 对用户密码进行Md5加密
///
///
///
public string MD5(string str)
{
MD5 md5 = new MD5CryptoServiceProvider();
byte[] data = System.Text.Encoding.Default.GetBytes(str);
byte[] result = md5.ComputeHash(data);
string ret = "";
for (int i = 0; i < result.Length; i++)
{
ret += result[i].ToString("x").PadLeft(2, '0');
}
return ret.Substring(0, 20);
}
///
/// 过滤非法字符字符串，防止Sql注入
///
///
///
public static string InjectionFilt(string str)
{
StringBuilder sb1 = new StringBuilder(str.ToLower());
sb1 = sb1.Replace("&", "&").Replace("=", "＝").Replace(" ", "kongge").Replace("-", "—").Replace("<", "<").Replace(">", ">").Replace("(", "(").Replace("+", "＋").Replace("*", "※");
sb1 = sb1.Replace(")", ")").Replace("%", "%").Replace("!", "!").Replace("/", "/").Replace("\'", "'").Replace("\"", """).Replace("\\", "\").Replace(":", "：");
sb1 = sb1.Replace("update", "updata").Replace("select", "se1ect").Replace("insert", "insret").Replace("delete", "de1ete").Replace("declare", "dec1are").Replace("from", "FR0M").Replace("and", "a-n-d").Replace("or", "0R");
string str1 = sb1.ToString();
return str1;
}
其他页码调用时如下：
DataSet dc = new DataSet();
string sqlStr1 = "select book_class_id,book_class_name from book_class";
dc = CC.GetDataSet(sqlStr1, "00");