declare
@aa varchar(20)
set @aa= CONVERT(varchar(100), GETDATE(), 23)
--//日
print @aa+' 0:00:00.000'
print @aa+' 23:59:59.999'
--//周
print CONVERT(varchar(100), DATEADD(wk, DATEDIFF(wk,0,getdate()), 0), 23)+' 0:00:00.000'
print CONVERT(varchar(100), DATEADD(wk, DATEDIFF(wk,0,getdate()), 6), 23)+' 23:59:59.999'
--//月
print CONVERT(varchar(100), DATEADD(m, DATEDIFF(m,0,getdate()), 0), 23)+' 0:00:00.000'
print CONVERT(varchar(100), DATEADD(m, DATEDIFF(m,0,getdate()), 30), 23)+' 23:59:59.999'
select distinct (userid),sum(score) as SumScore from ph where endTime between @aa+' 0:00:00.000' and @aa+' 23:59:59.999' group by userid order by SumScore desc
select distinct (userid),sum(score) as SumScore from ph where endTime between CONVERT(varchar(100), DATEADD(wk, DATEDIFF(wk,0,getdate()), 0), 23)+' 0:00:00.000' and CONVERT(varchar(100), DATEADD(wk, DATEDIFF(wk,0,getdate()), 6), 23)+' 23:59:59.999' group by userid order by SumScore desc
select distinct (userid),sum(score) as SumScore from ph where endTime between CONVERT(varchar(100), DATEADD(wk, DATEDIFF(wk,0,getdate()), 0), 23)+' 0:00:00.000' and CONVERT(varchar(100), DATEADD(wk, DATEDIFF(wk,0,getdate()), 6), 23)+' 23:59:59.999' group by userid order by SumScore desc
1。如果装sql server中未出现异常的话，且一些自选参数，账户，密码等没有错误的话。一旦出现诸如socket建立不起，连接不上等问题。最有效的解决方法是打补丁，其中sp4：http://www.microsoft.com/downloads/details.aspx?DisplayLang=zh-cn&FamilyID=8e2dfc8d-c20e-4446-99a9-b7f0213f8bc5，sp3a：http://www.microsof ......
SqlCommand com = new SqlCommand("select * from myuser where username=@UserName and password=@Pwd", con);
com.Parameters.Add(new SqlParameter("@UserN ......
任何一种使用数据库web程序（当然，也包括桌面程序）都有被SQL注入的风险。防止被SQL注入，最基本的方法是在代码级别就要阻止这种可能，这个网上讲的很多，我就不多说了。不过如果你拿到的是一个已经完工的产品，这个时候该如何解决呢？我介绍几种对于ASP和ASP.NET有效的防止SQL注入的方案，而且是免费的。
UrlScan 3.1
......
