database.cs

网开商城系统网开商城系统网开商城系统网开商城系统

            }
        }
        DataSet ds = new DataSet();
        SqlDataAdapter da = new SqlDataAdapter();
        da.SelectCommand = cmd;
        da.Fill(ds,table);
        DataTable dt = ds.Tables[0];
        Close();
        return dt;

    }
    #endregion
    #region 分页重载函数
       public DataTable GetTable(string proname, SqlParameter[] param, string table, int IsType, int currentPage, int pageSize)
    {
        Open();
        SqlCommand cmd = new SqlCommand(proname, cn);
        if (IsType == 1)
        {
            cmd.CommandType = CommandType.StoredProcedure;
        }
        else
        {
            cmd.CommandType = CommandType.Text;
        }
        if (param != null)
        {
            foreach (SqlParameter s in param)
            {
                cmd.Parameters.Add(s);
            }
        }
        DataSet ds = new DataSet();
        SqlDataAdapter da = new SqlDataAdapter();
        da.SelectCommand = cmd;
        da.Fill(ds, currentPage, pageSize, table);
        DataTable dt = ds.Tables[0];
        Close();
        return dt;

    }

    #endregion
    #region MD5类的使用加密方法
    /// <summary>
    /// 加密方法
    /// </summary>
    /// <param name="input">要转换的字符串</param>
    /// <returns>转换后的MD5</returns>
    public static string GetMD5(string input)
    {

        MD5 md5 = MD5.Create();
        string result = "";
        byte[] data = md5.ComputeHash(System.Text.Encoding.Default.GetBytes(input));
        for (int i = 0; i < data.Length; i++)
        {
            result += data[i].ToString("x2");
        }
        return result;
    }

    ///  admin888 加密后7fef6171469e80d32c0559f88b377245
    /// admin加密后21232f297a57a5a743894a0e4a801fc3
    /// <summary>
    /// MD5比较
    /// </summary>
    /// <param name="input">输入的字符串</param>
    /// <param name="data">比较的字符串</param>
    /// <returns>是否相同</returns>
    public bool passWordCheck(string input, string data)
    {
        string hashInput = GetMD5(input);
        if (hashInput.Equals(data))
        {
            return true;
        }
        else
        {
            return false;
        }
    }
    #endregion
    #region 截取字符串长短
    /// 说明：SubStr用来将字符串保留到指定长度，将超出部分用“...”代替。
    /// 返回值：处理后的这符串。
    /// 参数：	sString原字符串。
    ///			nLeng长度。
    /// </summary>
    public static  string SubStr(string sString, int nLeng)
    {
        if (sString.Length <= nLeng)
        {
            return sString;
        }
        int nStrLeng = nLeng - 3;
        string sNewStr = sString.Substring(0, nStrLeng);
        sNewStr = sNewStr + "...";
        return sNewStr;
    }
    #endregion
    #region 防注入
    /// <summary>
    /// 说明:过滤危险字符
    /// 返回值：处理后的这符串。
    /// 参数：	str原字符串。

    /// </summary>

    public string HtmlEncode(string str)
    {
        str = str.Replace("&", "&amp;");
        str = str.Replace("<", "&lt;");
        str = str.Replace(">", "&gt");
        str = str.Replace("'", "''");
        str = str.Replace("*", "");
        str = str.Replace("\n", "<br/>");
        str = str.Replace("\r\n", "<br/>");
        //str = str.Replace("?","");
        str = str.Replace("select", "");
        str = str.Replace("insert", "");
        str = str.Replace("update", "");
        str = str.Replace("delete", "");
        str = str.Replace("create", "");
        str = str.Replace("drop", "");
        str = str.Replace("delcare", "");
        if (str.Trim().ToString() == "") { str = "无"; }
        return str.Trim();
    }
    #endregion
    #region 提示信息

    public static string MessageBox(string TxtMessage, string href)
    {
        string str="";
        str = "<script>alert('" + TxtMessage + "');location.href='"+href+"';</script>";
        return str;
    }
    #endregion
    #region 提示信息

    public static string topMessageBox(string TxtMessage, string href)
    {
        string str = "";
        str = "<script>alert('" + TxtMessage + "');window.top.location.href='" + href + "';</script>";
        return str;
    }
        #endregion
    #region 框架页返回

   public static string Goback(string href)
    {
        string str="";
        str = "<script language=javascript>window.parent.frames['right'].location.href= '"+href+"';</script>";
        return str;
    }
    #endregion
    #region 用户是id是否为数字
    public static bool IsNum(string Str)
    {
        bool blResult = true;
        if (Str == "")
            blResult = false;
        else
        {
            foreach (char Char in Str)
            {
                if (!Char.IsNumber(Char))
                {
                    blResult = false;
                    break;
                }
            }
            if (blResult)
                if (int.Parse(Str) == 0)
                    blResult = false;
        }
        return blResult;

    }
    //string Topicid = Request.QueryString["Topicid"];
    //if (!IsNum(Topicid))
    #endregion
    #region 注入检测
    public static bool bad(string s)
    {
        if (s.ToLower().IndexOf(" or") >= 0)
            return false;
        if (s.ToLower().IndexOf("select") >= 0 || s.ToLower().IndexOf("delete") >= 0 || s.ToLower().IndexOf("update") >= 0 || s.ToLower().IndexOf("insert") >= 0)
            return false;
        if (s.ToLower().IndexOf("<script>") >= 0)
            return false;
        return true;
    }
    #endregion
    #region 存储过程生成的参数
    /// <summary>
    /// 生成存储过程参数
    /// </summary>
    /// <param name="ParamName">存储过程名称</param>
    /// <param name="DbType">参数类型</param>
    /// <param name="Size">参数大小</param>
    /// <param name="Direction">参数方向</param>
    /// <param name="Value">参数值</param>
    /// <returns>新的 parameter 对象</returns>
    public static SqlParameter CreateParam(string ParamName, SqlDbType DbType, Int32 Size, ParameterDirection Direction, object Value)
    {
         SqlParameter param;

        ///当参数大小为0时，不使用该参数大小值
        if (Size > 0)
        {
            param = new SqlParameter(ParamName, DbType, Size);
        }
        else
        {
            ///当参数大小为0时，不使用该参数大小值
            param = new SqlParameter(ParamName, DbType);
        }

        ///创建输出类型的参数
        param.Direction = Direction;
        if (!(Direction == ParameterDirection.Output && Value == null))
        {
            param.Value = Value;
        }

        ///返回创建的参数
        return param;
    }

    /// <summary>
    /// 传入输入参数
    /// </summary>
    /// <param name="ParamName">存储过程名称</param>
    /// <param name="DbType">参数类型</param></param>
    /// <param name="Size">参数大小</param>
    /// <param name="Value">参数值</param>
    /// <returns>新的parameter 对象</returns>
    public static SqlParameter CreateInParam(string ParamName, SqlDbType DbType, int Size, object Value)
    {
        return CreateParam(ParamName, DbType, Size, ParameterDirection.Input, Value);
    }

    /// <summary>
    /// 传入返回值参数
    /// </summary>
    /// <param name="ParamName">存储过程名称</param>
    /// <param name="DbType">参数类型</param>
    /// <param name="Size">参数大小</param>
    /// <returns>新的 parameter 对象</returns>
    public static SqlParameter CreateOutParam(string ParamName, SqlDbType DbType, int Size)
    {
        return CreateParam(ParamName, DbType, Size, ParameterDirection.Output, null);
    }

    /// <summary>
    /// 传入返回值参数
    /// </summary>
    /// <param name="ParamName">存储过程名称</param>
    /// <param name="DbType">参数类型</param>
    /// <param name="Size">参数大小</param>
    /// <returns>新的 parameter 对象</returns>
    public static SqlParameter CreateReturnParam(string ParamName, SqlDbType DbType, int Size)
    {
        return CreateParam(ParamName, DbType, Size, ParameterDirection.ReturnValue, null);
    }

    /// <summary>
    /// 
    #endregion
    #region 将DataReader转为DataTable
    /// <summary>
    /// 将DataReader转为DataTable
    /// </summary>
    /// <param name="DataReader">DataReader</param>
    public static DataTable ConvertdrTodt(SqlDataReader dataReader)
    {
        ///定义DataTable
        DataTable datatable = new DataTable();

        ///动态添加表的数据列
        for (int i = 0; i < dataReader.FieldCount; i++)
        {
            DataColumn mydc = new DataColumn();
            mydc.DataType = dataReader.GetFieldType(i);
            mydc.ColumnName = dataReader.GetName(i);
            datatable.Columns.Add(mydc);
        }

        ///添加表的数据
        while (dataReader.Read())
        {
            DataRow mydr = datatable.NewRow();
            for (int i = 0; i < dataReader.FieldCount; i++)
            {
                mydr[i] = dataReader[i].ToString();
            }
            datatable.Rows.Add(mydr);
            mydr = null;
        }
        ///关闭数据读取器
        dataReader.Close();
        return datatable;
    }
    #endregion
  




}