--µ±Á½¸ö»òÁ½ÒÔÉϵIJÙ×÷Ҫô¶¼Ö´ÐУ¬ÒªÃ´¶¼²»Ö´ÐÐʱҪÓÃÊÂÎñ¡£
1. Sqlд·¨(ÊÂÎï+Óαê)
--¿ªÊ¼ÊÂÎñ
BEGIN TRAN
--²»ÏÔʾ¼ÆÊýÐÅÏ¢
SET NOCOUNT ON
DECLARE @ProjNo varchar(50),@CusNo varchar(50)
--ÉùÃ÷Óαê
DECLARE CRMPSContact_cursor CURSOR FOR
SELECT ProjNo
from CRMPSContact
WHERE ProjNo>0
--´ò¿ªÓαê
OPEN CRMPSContact_cursor
--È¡µÚÒ»ÐеÄÖµ¸ø×¨°¸±äÁ¿: @ProjNo
FETCH NEXT from CRMPSContact_cursor
INTO @ProjNo
--È¡µÃ¿Í»§ºÅ
select @CusNo = CusNo
from CRMPSProjectM
where ProjNo = @ProjNo
--µÃµ½CRMPSContactÖÐijר°¸ºÅ¶ÔÓ¦µÄ¿Í»§ºÅ
update CRMPSContact
set CusNo = @CusNo
where ProjNo = @ProjNo
--Ö´ÐдíÎ󻨹ö
if @@error!=0
begin
rollback tran
return
end
--ÒÆ¶¯Óαê,ÆäËüËùÓÐÐиüвÙ×÷(µ±µ½½áβʱÍ˳ö)
WHIL ......
ʹÓÃVB°ÑExcelµ¼Èëµ½SqlÊý¾Ý¿âÖУ¬ÆäʵÓм¸ÖÖ·½·¨¡£
ÏÂÃæÎÒ½éÉܵÄÕâÖÖ·½·¨£¬½ÏΪ¼òµ¥¡£
ÆäʵÕâÖÖ·½·¨µÄ»°£¬ÊÇÖ±½ÓʹÓÃT-SQL²Ù×÷µÄ£¬Òò´Ë£¬µ½ÁËVBÀïÃæ£¬Ö±½ÓeccuteÕâ¸ö´úÂë¾ÍOKÁ˵ġ£
-----------------------------------------------------ÏÂÃæÊÇÔÚT-sqlÖеÄÓï¾ä
if object_id('NewTable') is not null/*ÅжϱíNewTableÊÇ·ñ´æÔÚ£¬Èç¹û´æÔÚÔòɾ³ýËü*/
drop table NewTable
Select * Into NewTable from OpenDataSource('Microsoft.Jet.OLEDB.4.0'," _
& "'Data Source=" & ExcelÎļþÃû£¨¾ø¶Ô·¾¶£© & _
";User ID=Admin;Password=;Extended properties=Excel 5.0')...[¹¤×÷±íÃû]
-----------------------------------------------------ÉÏÃæÊÇÔÚT-sqlÖеÄÓï¾ä
ÕâÑù£¬¾Í°ÑÕâ¸öExcel¹¤×÷±íÍêÕûµÄµ¼Èëµ½Sqlµ±Ç°Êý¾Ý¿âϵÄNewTableµÄ±íÖÐÁË¡£
Èç¹ûÏëµ½VBÀïÃæÊ¹Óã¬ÔòÁ¬½ ......
ʹÓÃVB°ÑExcelµ¼Èëµ½SqlÊý¾Ý¿âÖУ¬ÆäʵÓм¸ÖÖ·½·¨¡£
ÏÂÃæÎÒ½éÉܵÄÕâÖÖ·½·¨£¬½ÏΪ¼òµ¥¡£
ÆäʵÕâÖÖ·½·¨µÄ»°£¬ÊÇÖ±½ÓʹÓÃT-SQL²Ù×÷µÄ£¬Òò´Ë£¬µ½ÁËVBÀïÃæ£¬Ö±½ÓeccuteÕâ¸ö´úÂë¾ÍOKÁ˵ġ£
-----------------------------------------------------ÏÂÃæÊÇÔÚT-sqlÖеÄÓï¾ä
if object_id('NewTable') is not null/*ÅжϱíNewTableÊÇ·ñ´æÔÚ£¬Èç¹û´æÔÚÔòɾ³ýËü*/
drop table NewTable
Select * Into NewTable from OpenDataSource('Microsoft.Jet.OLEDB.4.0'," _
& "'Data Source=" & ExcelÎļþÃû£¨¾ø¶Ô·¾¶£© & _
";User ID=Admin;Password=;Extended properties=Excel 5.0')...[¹¤×÷±íÃû]
-----------------------------------------------------ÉÏÃæÊÇÔÚT-sqlÖеÄÓï¾ä
ÕâÑù£¬¾Í°ÑÕâ¸öExcel¹¤×÷±íÍêÕûµÄµ¼Èëµ½Sqlµ±Ç°Êý¾Ý¿âϵÄNewTableµÄ±íÖÐÁË¡£
Èç¹ûÏëµ½VBÀïÃæÊ¹Óã¬ÔòÁ¬½ ......
1.²éѯµÄÄ£ºýÆ¥Åä
¾¡Á¿±ÜÃâÔÚÒ»¸ö¸´ÔÓ²éѯÀïÃæÊ¹Óà LIKE '%parm1%'—— ºìÉ«±êʶλÖõİٷֺŻᵼÖÂÏà¹ØÁеÄË÷ÒýÎÞ·¨Ê¹Óã¬×îºÃ²»ÒªÓÃ.
½â¾ö°ì·¨:
ÆäʵֻÐèÒª¶Ô¸Ã½Å±¾ÂÔ×ö¸Ä½ø£¬²éѯËٶȱã»áÌá¸ß½ü°Ù±¶¡£¸Ä½ø·½·¨ÈçÏ£º
a¡¢ÐÞ¸Äǰ̨³ÌÐò——°Ñ²éѯÌõ¼þµÄ¹©Ó¦ÉÌÃû³ÆÒ»À¸ÓÉÔÀ´µÄÎı¾ÊäÈë¸ÄΪÏÂÀÁÐ±í£¬Óû§Ä£ºýÊäÈ빩ӦÉÌÃû³ÆÊ±£¬Ö±½ÓÔÚǰ̨¾Í°ï涨λµ½¾ßÌåµÄ¹©Ó¦ÉÌ£¬ÕâÑùÔÚµ÷Óúǫ́³ÌÐòʱ£¬ÕâÁоͿÉÒÔÖ±½ÓÓõÈÓÚÀ´¹ØÁªÁË¡£
b¡¢Ö±½ÓÐ޸ĺǫ́——¸ù¾ÝÊäÈëÌõ¼þ£¬ÏȲé³ö·ûºÏÌõ¼þµÄ¹©Ó¦ÉÌ£¬²¢°ÑÏà¹Ø¼Ç¼±£´æÔÚÒ»¸öÁÙʱ±íÀïÍ·£¬È»ºóÔÙÓÃÁÙʱ±íÈ¥×ö¸´ÔÓ¹ØÁª
2.Ë÷ÒýÎÊÌâ
ÔÚ×öÐÔÄܸú×Ù·ÖÎö¹ý³ÌÖУ¬¾³£·¢ÏÖÓв»ÉÙºǫ́³ÌÐòµÄÐÔÄÜÎÊÌâÊÇÒòΪȱÉÙºÏÊÊË÷ÒýÔì³ÉµÄ£¬ÓÐЩ±íÉõÖÁÒ»¸öË÷Òý¶¼Ã»ÓС£ÕâÖÖÇé¿öÍùÍù¶¼ÊÇÒòΪÔÚÉè¼Æ±íʱ£¬Ã»È¥¶¨ÒåË÷Òý£¬¶ø¿ª·¢³õÆÚ£¬ÓÉÓÚ±í¼Ç¼ºÜÉÙ£¬Ë÷Òý´´½¨Óë·ñ£¬¿ÉÄܶÔÐÔÄÜûɶӰÏ죬¿ª·¢ÈËÔ±Òò´ËҲδ¶à¼ÓÖØÊÓ¡£È»Ò»µ©³ÌÐò·¢²¼µ½Éú²ú»·¾³£¬Ëæ×Åʱ¼äµÄÍÆÒÆ£¬±í¼Ç¼ԽÀ´Ô½¶à
ÕâʱȱÉÙË÷Òý£¬¶ÔÐÔÄܵÄÓ°Ïì±ã»áÔ½À´Ô½´óÁË¡£
Õâ¸öÎÊÌâÐèÒªÊý¾Ý¿âÉè¼ÆÈËÔ±ºÍ¿ª·¢ÈËÔ±¹²Í¬¹Ø×¢
·¨Ôò£º²»ÒªÔÚ½¨Á¢µÄË÷ÒýµÄÊý¾ÝÁÐÉϽøÐÐÏÂÁвÙ×÷:
¡ô± ......
1¡¢¼ì²éÊÇ·ñÓзǷ¨×Ö·û
public static boolean sql_inj(String str)
{
String inj_str = "'|and|exec|insert|select|delete|update|
count|*|%|chr|mid|master|truncate|char|declare|;|or|-|+|,";
//ÕâÀïµÄ¶«Î÷»¹¿ÉÒÔ×Ô¼ºÌí¼Ó
String[] inj_stra=inj_str.split("\\|");
for (int i=0 ; i <; inj_stra.length ; i++ )
{
if (str.indexOf(inj_stra[i])<=0)
{
return true;
}
}
return false;
}
2¡¢¹ýÂË·Ç·¨×Ö·û
public static String TransactSQLInjection(String str)
{
return str.replaceAll(".*([';]+|(--)+).*", " ");
} ......
¼ÇÈ¡¼Ç¼¼¯
create procedure getArticle
as
select * from Article_Content
GO
asp.net µ÷Ó÷½·¨
SqlConnection Conn = new SqlConnection();
Conn.ConnectionString = Data.Connstr();
Conn.Open();
SqlDataAdapter sdr=new SqlDataAdapter();
sdr.SelectCommand = new SqlCommand("getArticle", Conn);
sdr.SelectCommand.CommandType=CommandType.StoredProcedure;
DataSet rs = new DataSet();
sdr.Fill(rs);
sdr.Dispose();
Conn.Dispose();
Response.Write(rs.Tables[0].Rows.Count);
---------------------------------------- ......
¼ÇÈ¡¼Ç¼¼¯
create procedure getArticle
as
select * from Article_Content
GO
asp.net µ÷Ó÷½·¨
SqlConnection Conn = new SqlConnection();
Conn.ConnectionString = Data.Connstr();
Conn.Open();
SqlDataAdapter sdr=new SqlDataAdapter();
sdr.SelectCommand = new SqlCommand("getArticle", Conn);
sdr.SelectCommand.CommandType=CommandType.StoredProcedure;
DataSet rs = new DataSet();
sdr.Fill(rs);
sdr.Dispose();
Conn.Dispose();
Response.Write(rs.Tables[0].Rows.Count);
---------------------------------------- ......
¼ÇÈ¡¼Ç¼¼¯
create procedure getArticle
as
select * from Article_Content
GO
asp.net µ÷Ó÷½·¨
SqlConnection Conn = new SqlConnection();
Conn.ConnectionString = Data.Connstr();
Conn.Open();
SqlDataAdapter sdr=new SqlDataAdapter();
sdr.SelectCommand = new SqlCommand("getArticle", Conn);
sdr.SelectCommand.CommandType=CommandType.StoredProcedure;
DataSet rs = new DataSet();
sdr.Fill(rs);
sdr.Dispose();
Conn.Dispose();
Response.Write(rs.Tables[0].Rows.Count);
---------------------------------------- ......
*
ÌṩÁ½ÖÖ°æ±¾µÄOutLookÓʼþ·¢ËÍ·½Ê½
ÓÐÒÉÎÊÁªÏµ×÷Õß: zlp321001@hotmail.com
*/
A:ÀûÓÃOutLook2003·¢ËÍÓʼþ
----------------------------------------------------------------------
/
*²âÊÔ»·¾³: windowx Xp
OutLook: OutLook 2003
²âÊԵĵç×ÓÓʼþ: zlp321001@126.com
/
µÚÒ»²½Ö裺½¨ÅäÖÃÎļþ
¿ªÊ¼->¿ØÖÆÃæ°æ->Óʼþ>Ë«»÷Óʼþ->Ìí¼Ó->ÅäÖÃÎļþÃû³Æ(SQLSendMailServer)
Ìí¼Óеç×ÓÓʼþÕÊ»§->Ñ¡ÔñPOP3(P)->
Óû§ÐÅÏ¢:
ÐÕÃû:zlp
ÓʼþµØÖ·:zlp321001@126.com
µÇ¼ÐÅÏ¢:
Óû§Ãû:zlp321001
ÃÜÂë:****
·þÎñÆ÷ÐÅÏ¢:(×¢Òâ:ÿһ¸ö·þÎñÆ÷ÐÅÏ¢ÅäÖþù²»Ò»Ñù,²Î¿¼´Ë·þÎñÆ÷ÅäÖðïÖú,±ÈÈçÐÂÀ˾Ͳ»Ò»Ñù)
½ÓÊÕÓʼþ·þÎñÆ÷(POP3)(I): pop3.126.com
·¢ËÍÓʼþ·þÎñÆ÷(SMTP)(O): smtp.126.com
µã»÷ÆäËûÉèÖÃ->·¢ËÍ·þÎñÆ÷->Ñ¡ÖÐ(Îҵķ¢ËÍ·þÎñÆ÷(SMTP)ÒªÇóÑéÖ¤)->Ñ¡ÔñµÇ¼ʹÓÃ
Óû§Ãû:zlp321001
ÃÜÂë:****
Ñ¡ÖмÇסÃÜÂë
È·¶¨
²âÊÔÕÊ»§ÉèÖÃ->³É¹¦->ÏÂÒ»²¿->È·¶¨
´ò¿ªOutLookÈí¼þ£¬²âÊÔÊÇ·ñÄÜÕý³£½ÓÊÕÓʼþ£¬Ò»ÇÐOK,½øÐÐÏÂÒ»²½ÅäÖÃ
µÚ¶þ²½Ö裺ÅäÖÃÊý¾Ý¿â·þÎñÆ÷²ÉÓÃÓʼþÅäÖÃÎļþ
ÖØÐÂÆô¶¯MSSQLSERVER ·þÎñ(ÅäÖóÉÓòÓ ......