ASP.NET开发Web常用函数公共类

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using System.Security.Cryptography;
using System.Text;

/// <summary>
/// CommonClass 的摘要说明
/// </summary>
public class CommonClass
{
	public CommonClass()
	{
		//
		// TODO: 在此处添加构造函数逻辑
		//
	}
    /// <summary>
    /// 连接数据库
    /// </summary>
    /// <returns>返回SqlConnection对象</returns>
    public SqlConnection GetConnection()
    {
        string myStr = ConfigurationManager.AppSettings["ConnectionString"].ToString();
        SqlConnection myConn = new SqlConnection(myStr);
        return myConn;
    }
    /// <summary>
    /// 说明：MessageBox用来在客户端弹出对话框。
    /// 参数：TxtMessage 对话框中显示的内容。
    /// 参数：Url 对话框关闭后，跳转的页
    /// </summary>
    public string MessageBox(string TxtMessage,string Url)
    {
        string str;
        str = "<script language=javascript>alert('" + TxtMessage + "');location='" + Url + "'</script>";
        return str;
    }
    /// <summary>
    /// 说明：MessageBox用来在客户端弹出对话框。
    /// 参数：TxtMessage 对话框中显示的内容。
    /// </summary>
    public string MessageBox(string TxtMessage)
    {
        string str;
        str = "<script language=javascript>alert('" + TxtMessage + "')</script>";
        return str;
    }
 
    /// <summary>
    /// 说明：ExecSQL用来执行SQL语句。
    ///	返回值：操作是否成功(True\False)。
    ///	参数：sqlStr SQL字符串
    /// </summary>
    public Boolean ExecSQL(string sqlStr)
    {
        SqlConnection myConn = GetConnection();
        myConn.Open();
        SqlCommand myCmd = new SqlCommand(sqlStr, myConn);
        try
        {
            myCmd.ExecuteNonQuery();
            myConn.Close();
        }
        catch
        {
            myConn.Close();
            return false;
        }
        return true;
    }
    /// <summary>
    /// 说明：GetDataSet数据集，返回数据源的数据集
    ///	返回值：数据集DataSet
    ///	参数：sqlStr SQL字符串，TableName 数据表名称
    /// </summary>
    public System.Data.DataSet GetDataSet(string sqlStr, string TableName)
    {
        SqlConnection myConn =GetConnection();
        myConn.Open();
        SqlDataAdapter adapt = new SqlDataAdapter(sqlStr, myConn);
        DataSet ds = new DataSet();
        adapt.Fill(ds, TableName);
        myConn.Close();
        return ds;
    }
    /// <summary>
    /// 防止SQL 注入式攻击
    /// 
    /// </summary>
    /// <param name="loginName">用户登录名称</param>
    /// <param name="loginPwd">用户登录密码</param>
    public int checkLogin(string loginName, string loginPwd)
    {
        SqlConnection myConn = GetConnection();
        SqlCommand myCmd = new SqlCommand("select count(*) from Administratorer where administrator_name=@loginName and administrator_password=@loginPwd", myConn);
        myCmd.Parameters.Add(new SqlParameter("@loginName", SqlDbType.VarChar, 20));
        myCmd.Parameters["@loginName"].Value = loginName;
        myCmd.Parameters.Add(new SqlParameter("@loginPwd", SqlDbType.VarChar, 50));
        myCmd.Parameters["@loginPwd"].Value = loginPwd;
        myConn.Open();
        int i = (int)myCmd.ExecuteScalar();
        myCmd.Dispose();
        myConn.Close();
        return i;
    }



    public int checkuser(string loginName1, string loginPwd1)
    {
        SqlConnection myConn1 = GetConnection();
        SqlCommand myCmd1 = new SqlCommand("select count(*) from Username where _user=@loginName1 and _password=@loginPwd1", myConn1);
        myCmd1.Parameters.Add(new SqlParameter("@loginName1", SqlDbType.VarChar, 20));
        myCmd1.Parameters["@loginName1"].Value = loginName1;
        myCmd1.Parameters.Add(new SqlParameter("@loginPwd1", SqlDbType.VarChar, 50));
        myCmd1.Parameters["@loginPwd1"].Value = loginPwd1;
        myConn1.Open();
        int t = (int)myCmd1.ExecuteScalar();
        myCmd1.Dispose();
        myConn1.Close();
        return t;
    }
    /// <summary>
    /// 实现随机验证码
    /// </summary>
    /// <param name="n">显示验证码的个数</param>
    /// <returns>返回生成的随机数</returns>
    public string RandomNum(int n) //
    {
        //定义一个包括数字、大写英文字母和小写英文字母的字符串
        string strchar = "0,1,2,3,4,5,6,7,8,9,A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z";
        //将strchar字符串转化为数组
        //String.Split 方法返回包含此实例中的子字符串（由指定Char数组的元素分隔）的 String 数组。
        string[] VcArray = strchar.Split(',');
        string VNum = "";
        //记录上次随机数值，尽量避免产生几个一样的随机数           
        int temp = -1;                       
        //采用一个简单的算法以保证生成随机数的不同
        Random rand = new Random();
        for (int i = 1; i < n + 1; i++)
        {
            if (temp != -1)
            {
                //unchecked 关键字用于取消整型算术运算和转换的溢出检查。
                //DateTime.Ticks 属性获取表示此实例的日期和时间的刻度数。
                rand = new Random(i * temp * unchecked((int)DateTime.Now.Ticks));
            }
            //Random.Next 方法返回一个小于所指定最大值的非负随机数。
            int t = rand.Next(61);
            if (temp != -1 && temp == t)
            { 
                return RandomNum(n);
            }
            temp = t;
            VNum += VcArray[t];
        }
        return VNum;//返回生成的随机数
    }
}

   //执行操作得到记录条数
    public int ExecteNonQuery(string sqlStr)
    {
        int res = 0;
        SqlConnection myConn = GetConnection();
        myConn.Open();
        SqlCommand myCmd = new SqlCommand(sqlStr, myConn);
        try
        {
            res=myCmd.ExecuteNonQuery();
            myConn.Close();
        }
        catch
        {
            res = 0;
            myConn.Close();
            return res;
        }
        return res;
    }





    /// 

    /// 对用户密码进行Md5加密
    /// 
    /// 
    /// 
  
  
    public string MD5(string str)
    {
        MD5 md5 = new MD5CryptoServiceProvider();
        byte[] data = System.Text.Encoding.Default.GetBytes(str);
        byte[] result = md5.ComputeHash(data);
        string ret = "";
        for (int i = 0; i < result.Length; i++)
        {
            ret += result[i].ToString("x").PadLeft(2, '0');
        }
        return ret.Substring(0, 20);
    }
    /// 

    /// 过滤非法字符字符串，防止Sql注入
    /// 
    /// 
    /// 
  
  
    public static string InjectionFilt(string str)
    {
        StringBuilder sb1 = new StringBuilder(str.ToLower());
        sb1 = sb1.Replace("&", "&").Replace("=", "＝").Replace(" ", "kongge").Replace("-", "—").Replace("<", "<").Replace(">", ">").Replace("(", "(").Replace("+", "＋").Replace("*", "※");
        sb1 = sb1.Replace(")", ")").Replace("%", "%").Replace("!", "!").Replace("/", "/").Replace("\'", "'").Replace("\"", """).Replace("\\", "\").Replace(":", "：");
        sb1 = sb1.Replace("update", "updata").Replace("select", "se1ect").Replace("insert", "insret").Replace("delete", "de1ete").Replace("declare", "dec1are").Replace("from", "FR0M").Replace("and", "a-n-d").Replace("or", "0R");
        string str1 = sb1.ToString();
        return str1;
    } 

其他页码调用时如下：

    DataSet dc = new DataSet();

        
          string   sqlStr1 = "select book_class_id,book_class_name from book_class";

            dc = CC.GetDataSet(sqlStr1, "00");