asp .net SqlDataSource参数化查询

最新推荐文章于 2022-11-18 18:39:06 发布

qq_32915337

最新推荐文章于 2022-11-18 18:39:06 发布

阅读量371

点赞数 1

分类专栏： c# 文章标签： .net

本文链接：https://blog.csdn.net/qq_32915337/article/details/126283517

版权

c# 专栏收录该内容

21 篇文章 1 订阅

订阅专栏

方式一:

都写在aspx

    <div>
        <asp:DropDownList ID="ddlTypeid" runat="server" AutoPostBack="true">
           <asp:ListItem Value="">所有</asp:ListItem>
           <asp:ListItem Value="1">1</asp:ListItem>
           <asp:ListItem Value="2">2</asp:ListItem>
           <asp:ListItem Value="3">3</asp:ListItem>
           <asp:ListItem Value="4">4</asp:ListItem>
        </asp:DropDownList>
    </div>
    <asp:GridView ID="GridView1" runat="server" AutoGenerateColumns="False"
        DataSourceID="SqlDataSource1">
        <Columns>
            <asp:BoundField DataField="ID" HeaderText="ID" SortExpression="ID" />
            <asp:BoundField DataField="TypeID" HeaderText="TypeID"
                SortExpression="TypeID" />
            <asp:BoundField DataField="Title" HeaderText="Title" SortExpression="Title" />
            <asp:BoundField DataField="AddDate" HeaderText="AddDate"
                SortExpression="AddDate" />
        </Columns>
    </asp:GridView>
    <asp:SqlDataSource ID="SqlDataSource1" runat="server"
        ConnectionString="Data Source=LICHUAN-64EDE70;Initial Catalog=Tests;Integrated Security=True"
        ProviderName="System.Data.SqlClient" SelectCommand="SELECT * FROM [Article] where typeid=@typeid ">
           <selectparameters>
              <asp:controlparameter name="typeid" ControlID ="ddlTypeid" propertyname="SelectedValue" />
          </selectparameters>
    </asp:SqlDataSource>

方式二:

在aspx.cs控制SqlDataSource,这种可以模糊查询(不用在aspx页面写selectparameters)并且可以改变SelectCommand

string name=ddlTypeid.SelectedValue;

SqlDataSource4.SelectCommand = "SELECT * FROM [Article] where typeid=@typeid ";
SqlDataSource4.SelectParameters.Add("typeid", string.Format("%{0}%", name));

方式三:

使用FilterExpression,需要注意的是这种方式不是参数化查询,谨慎使用

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >
    <head runat="server">
    <title>ASP.NET Example</title>
</head>
<body>
        <form id="form1" runat="server">

            <p>Show all employees with the following title:
            <asp:DropDownList
                id="DropDownList1"
                runat="server"
                AutoPostBack="True">
                <asp:ListItem Selected="True">Sales Representative</asp:ListItem>
                <asp:ListItem>Sales Manager</asp:ListItem>
                <asp:ListItem>Vice President, Sales</asp:ListItem>
            </asp:DropDownList></p>

            <asp:SqlDataSource
                id="SqlDataSource1"
                runat="server"
                ConnectionString="<%$ ConnectionStrings:MyNorthwind%>"
                SelectCommand="SELECT EmployeeID,FirstName,LastName,Title FROM Employees"
                FilterExpression="Title='{0}'">
                <FilterParameters>
                    <asp:ControlParameter Name="Title" ControlId="DropDownList1" PropertyName="SelectedValue"/>
                </FilterParameters>
            </asp:SqlDataSource>

            <p><asp:GridView
                id="GridView1"
                runat="server"
                DataSourceID="SqlDataSource1"
                AutoGenerateColumns="False">
                <columns>
                    <asp:BoundField Visible="False" DataField="EmployeeID" />
                    <asp:BoundField HeaderText="First Name" DataField="FirstName" />
                    <asp:BoundField HeaderText="Last Name" DataField="LastName" />
                </columns>
            </asp:GridView></p>

        </form>
    </body>
</html>