? 這幾天在查一些有關(guān)SQL語(yǔ)句防注入的資料，敲敲改改總算弄好了，不多說(shuō)，貼代碼

string str = @"server=LAPTOP-CM9CUARS;Integrated Security=SSPI;database=Space;";using (SqlConnection Conn = new SqlConnection(str)){Conn.Open(); //打開(kāi)數(shù)據(jù)庫(kù) try{using (SqlCommand Cmd = Conn.CreateCommand()){Cmd.CommandText = "select * from tabUsers where ID=@ID and hspwd=@hspwd";Cmd.Parameters.Add(new SqlParameter("@ID", ID));Cmd.Parameters.Add(new SqlParameter("@hspwd", hspwd1));int count = Convert.ToInt32(Cmd.ExecuteScalar());if (count > 0){ Session["ID1"] = ID;string sql = "select*from tabUsers where id='" + ID + "'";string name = Class.Search(sql);Session["name"] = name;Response.Write("<script>alert('登錄成功！');location='Space.aspx'</script>");}elseResponse.Write("<script>alert('登錄失敗，請(qǐng)正確填寫賬號(hào)、密碼！')</script>");}}

轉(zhuǎn)載于:https://www.cnblogs.com/wxy990118/p/6131394.html

總結(jié)

以上是生活随笔為你收集整理的参数化查询（简单举例）的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺(jué)得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。