? 這幾天在查一些有關SQL語句防注入的資料，敲敲改改總算弄好了，不多說，貼代碼

string str = @"server=LAPTOP-CM9CUARS;Integrated Security=SSPI;database=Space;";using (SqlConnection Conn = new SqlConnection(str)){Conn.Open(); //打開數據庫 try{using (SqlCommand Cmd = Conn.CreateCommand()){Cmd.CommandText = "select * from tabUsers where ID=@ID and hspwd=@hspwd";Cmd.Parameters.Add(new SqlParameter("@ID", ID));Cmd.Parameters.Add(new SqlParameter("@hspwd", hspwd1));int count = Convert.ToInt32(Cmd.ExecuteScalar());if (count > 0){ Session["ID1"] = ID;string sql = "select*from tabUsers where id='" + ID + "'";string name = Class.Search(sql);Session["name"] = name;Response.Write("<script>alert('登錄成功！');location='Space.aspx'</script>");}elseResponse.Write("<script>alert('登錄失敗，請正確填寫賬號、密碼！')</script>");}}

轉載于:https://www.cnblogs.com/wxy990118/p/6131394.html

總結

以上是生活随笔為你收集整理的参数化查询（简单举例）的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。