db.cs

一个简单的ASP.NET校友录系统。基于SQL

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
/// Download from www.51aspx.com(５１ａｓｐx．ｃｏｍ)
/// <summary>
/// db 的摘要说明
/// </summary>
public class db
{
    //先申明常用的对象
    private string connstr;
    private SqlConnection con;
    private SqlCommand cmd;
    private SqlDataAdapter sqladpter;
    private DataSet ds;
    private SqlDataReader dr;
    
	public db()
	{
		//实例化
        connstr = ConfigurationManager.ConnectionStrings["dsn"].ConnectionString;
        con = new SqlConnection(connstr);
        cmd = new SqlCommand();
        sqladpter = new SqlDataAdapter();
        ds = new DataSet();
	}

    public SqlDataReader Login(string sql)
    {
        cmd.CommandText=sql;
        cmd .Connection=con;
        if (con.State == ConnectionState.Closed)
        {
            con.Open();
        }
        dr = cmd.ExecuteReader(CommandBehavior.CloseConnection);
        return dr;
    }

    public void Insert(string username, string pass, string tel, string realname, string address, string qq, string email, string sex, string byyx)
    {//插入数据
        cmd.CommandText="insert into username values ('"+username+"','"+pass+"','"+realname+"','"+sex+"','"+tel+"','"+address+"','"+qq+"','"+email+"','"+byyx+"')";
        cmd.Connection = con;
        con.Open();
        cmd.ExecuteNonQuery();
    }
    public void Update(string username, string pass, string tel, string realname, string address, string qq, string email, string sex, string byyx)
    {//更新数据
        cmd.CommandText = "update username set username=@username, pass=@pass,realname=@realname,address=@address,qq=@qq,email=@email,sex=@sex,byyx=@byyx";
        cmd.Parameters.AddWithValue("@username",username);
        cmd.Parameters.AddWithValue("@pass", pass);
        cmd.Parameters.AddWithValue("@realname",realname);
        cmd.Parameters.AddWithValue("@sex", sex);
        cmd.Parameters.AddWithValue("@tel", tel);
        cmd.Parameters.AddWithValue("@address",address);
        cmd.Parameters.AddWithValue("@qq", qq);
        cmd.Parameters.AddWithValue("@email",email);
        cmd.Parameters.AddWithValue("@byyx", byyx);
        cmd.Connection = con;
        con.Open();
        cmd.ExecuteNonQuery();
    }
}