ASP.Net常用模块整理

为了让大家更好的学习,我把常用的模块写成一个个方法,希望能对大家有用.每个人都有不同的算法跟代码习惯,而且个人水平有限,欢迎大家多多指正.

前提准备:
由于项目是采用SQL数据库,所以我们先在web.config中设置好数据库连接

<appSettings>
        <add key="Conn" value="Server=(local);Database=dezai;User ID=sa;"></add>    
  </appSettings> 

  之后在CS代码中要注意引用

  using System.Data.Sqlclient;
  using System.Data;
  using System.Configuration;

以下就是常用的模块


1.会员登陆模块


用户控件: 
TextBox:TxtUser 用户名  TxtPwd 密码
Label:LblError 错误提示

存储过程:user_login
 

CREATE   procedure  user_login
@user_name   varchar ( 50 ),
@user_password   varchar ( 50 )
as
select   *   from  userwhere  [ User_Name ]   =   @User_Name   and   [ User_Pwd ]   =   @User_Password
if   @@rowcount > 0
begin

update    [ users ]   set  user_LoginTimes = user_LoginTimes + 1   where   [ User_Name ]   =   @User_Name   and   [ User_Pwd ]   =   @User_Password

end
GO

C#.Net：

Private  void  memberlogin()    
... {
SqlConnection conndb=new SqlConnection(ConfigurationSettings.AppSettings["Conn"]);
   conndb.Open();            
SqlCommand cmdlogin = new SqlCommand("User_login",conndb);
cmdlogin.CommandType = CommandType.StoredProcedure;
cmdlogin.Parameters.Add("@user_name",TxtUser.Text.Trim());
cmdlogin.Parameters.Add("@user_password",TxtPwd.Text.Trim());
SqlDataReader reader=cmdlogin.ExecuteReader();
if(reader.Read())
...{
                Session["user"]=reader["user_id"].ToString();
                Session["com"]=reader["com_id"].ToString();
                
                string url;
                url="../user/index.aspx?userid="+ Session["userid"] +"&comid="+ Session["comid"] +"";
                Response.Redirect(url);
            }
            else
            ...{
                LblError.Text ="Invalid Username or password！Please try again!";

            }


}

2.验证注册用户是否存在

用户控件:
TextBox: TxtMemberID
Label: LblChk

private   bool  idcheck()
         ... {
            SqlConnection conndb= new SqlConnection(System.Configuration.ConfigurationSettings.AppSettings["conn"]);
            conndb.Open();
            string memberid=TxtMemberId.Text.Trim();
            string sql="select User from users where User_Name ='"+memberid+"'";
            SqlCommand strchk=new SqlCommand(sql,conndb);
            SqlDataReader reader=strchk.ExecuteReader();
            if(reader.Read())
            ...{

                LblChk.Text="Sorry! this memberid was registed,Please choose another!";

                

                Response.Write("<script>al&#101;rt("Invalid member id");</script>");

                

                Response.End();

                

                return false;

            }
            else
            ...{
                return true;
            }3.新用户注册

用户控件: 
TextBox:TxtMemberId  TxtPwd  TxtEmail 
ListBox:LstIndustry

存储过程:Users_Insert

 

/**/ /*
作者：dezai
用途：新进会员的增加注册,同时注册与其相关的企业名录
日期：2006-3-1
*/


CREATE PROCEDURE Users_Insert
@User_Id  int  output,
@User_Type bit,
@User_Name  char ( 100 ),
@User_Pwd   char ( 100 ),
@User_Email  char ( 100 )
AS
   begin tran

    INSERT INTO [Users]
    (
    [user_type],
    [user_name],
    [user_pwd],
    [user_Email]
)

values
(
@User_Type,
@User_Name,
@User_Pwd,
@User_Email
)

if  @@error <> 0   goto  error
set  @user_Id = @@identity

Commit tran
return
ERROR:
     set  @User_Id  =   0
    rollback tran
GO

C#.Net：

private   void  reguser()
... {
SqlConnection conndb=new SqlConnection(ConfigurationSettings.AppSettings["Conn"]);
                
                SqlCommand cmdinsert = new SqlCommand("Users_Insert",conndb);

                cmdinsert.CommandType=CommandType.StoredProcedure;

                int intAuthorCount;
                cmdinsert.Parameters.Add("@User_Name",TxtMemberId.Text.ToString());
                cmdinsert.Parameters.Add("@User_Pwd",TxtPwd.Text.ToString());
                cmdinsert.Parameters.Add("@User_Email",TxtEmail.Text.ToString());
                cmdinsert.Parameters.Add("@User_Industry",LstIndustry.SelectedValue);
            SqlParameter  parmReturnValue = new SqlParameter("@User_id", SqlDbType.Int);
            parmReturnValue.Direction = ParameterDirection.Output; 
            cmdinsert.Parameters.Add(parmReturnValue);
                conndb.Open();
                cmdinsert.ExecuteNonQuery();
                 intAuthorCount = (int)cmdinsert.Parameters[ "@user_id"].Value; 
                             conndb.Close();

}

4.图片上传

private   void  uppic()
         ... {

             string mPath;
   string imagePath;
   string imageType;
   string imageName;
    DateTime dtmDate;

    dtmDate = DateTime.Now;

            if(""!=this.fileup.PostedFile.FileName)
            ...{
                imagePath = this.fileup.PostedFile.FileName;

                imageType = imagePath.Substring(imagePath.LastIndexOf(".")+1);

                imageName=imagePath.Substring(imagePath.LastIndexOf("/")+1);

                if("jpg" != imageType && "gif" !=imageType && "png" !=imageType && "PNG" !=imageType && "GIF" !=imageType && "JPG" !=imageType)
                ...{
                    Response.Write("<script language='javascript'>al&#101;rt('sorry!Please choose *.jpg or *.gif or *.png');</script>");
 
                    return;
                }
                else

                ...{
                    try
                    ...{

                        mPath=Server.MapPath("upfile");

                        this.fileup.PostedFile.SaveAs(mPath+"/"+"dezaistudio"+dtmDate.ToString("yyyyMMddhhmmss")+imageName);

                        this.ImageSmall.ImageUrl  = "dezaistudio"+dtmDate.ToString("yyyyMMddhhmmss")+imageName;
                        

                        Response.Write("<script language='javascript'>al&#101;rt('upload succesful');</script>");

                        TxtPicPath.Text = this.ImageSmall.ImageUrl.ToString().Trim();

                        
                    }
                    catch
                    ...{
                        Response.Write("error");
                    }
                }
            }

         }

5.DataList分页(其实Repeart也可采用这个,只是改一下控件名而已)

用户控件 
DataList: DlstInfolist
Label:lblCurrentPage 
HyperLink:lnkNext LnkPrev


存储过程:supplyinfo_select

/**/ /*
查询大类下所有的supplyinfo
2006-4-10
*/

create   procedure  supplyinfo_select

@bigclassid   int

as  

select   *   from  supply

where  

Supply_CatID = @bigclassid
GO

C#.Net：

private   void  dlstsupplyinfolist()
         ... {

            SqlConnection conndb = new SqlConnection(System.Configuration.ConfigurationSettings.AppSettings["conn"]);

            conndb.Open();


            string bigid=Request.QueryString["bigid"].Trim();


            SqlDataAdapter strbuyinfo = new SqlDataAdapter("supplyinfo_select",conndb); 

            strbuyinfo.SelectCommand.CommandType = CommandType.StoredProcedure;


            strbuyinfo.SelectCommand.Parameters.Add("@bigclassid",bigid);


            DataSet ds = new DataSet();

            strbuyinfo.Fill(ds);


        ...{


            PagedDataSource objPds = new PagedDataSource();
            objPds.DataSource = ds.Tables[0].DefaultView;
            objPds.AllowPaging = true;
            objPds.PageSize = 5;
            int CurPage;

            if (Request.QueryString["Page"] != null)
                CurPage=Convert.ToInt32(Request.QueryString["Page"]);
            else
                CurPage=1;

            objPds.CurrentPageIndex = CurPage-1; 
            lblCurrentPage.Text = "Page: " + CurPage.ToString();

            if (!objPds.IsFirstPage)
                lnkPrev.NavigateUrl=Request.CurrentExecutionFilePath + "?id="  + bigid +"&Page=" + Convert.ToString(CurPage-1);

            if (!objPds.IsLastPage)
                lnkNext.NavigateUrl=Request.CurrentExecutionFilePath + "?id="  + bigid +"&Page="+ Convert.ToString(CurPage+1);


            DlstInfolist.DataSource=objPds;

            DlstInfolist.DataKeyField="Supply";

            DlstInfolist.DataBind();
            
        }


        }

7.用户密码修改

用户控件:
Button:Btnsubmit
TextBox:TxtNewPwd

存储过程:userpwd_update

/**/ /*
作者：dezai
日期：2006-3-11
用途:用来修改会员的密码
*/

create   procedure  userpwd_update

@user_ID   int ,

@user_pwd    char ( 50 )

as
update   [ user ]

set

[ UserPwd ] = @user_pwd

where  

[ userid ] = @user_id
GO

C#.Net：

private   void  Btnsubmit_Click( object  sender, System.EventArgs e)
         ... {
            if(Page.IsValid)
            ...{
                string userid = Request.QueryString["userid"].Trim();

                SqlConnection conndb = new SqlConnection(System.Configuration.ConfigurationSettings.AppSettings["conn"]);

                conndb.Open();

                SqlCommand Strupdate = new SqlCommand("userpwd_update",conndb);


                Strupdate.CommandType = CommandType.StoredProcedure;


                Strupdate.Parameters.Add("@user_ID",userid);

                Strupdate.Parameters.Add("@user_pwd",TxtNewPwd.Text.Trim());

                Strupdate.ExecuteNonQuery();

                conndb.Close();

                Response.Write("<script language='javascript'>al&#101;rt('Update succesful!');</script>");
            }
            else
            ...{
                Response.Write("<script language='javascript'>al&#101;rt('Error!');</script>");}


        }

8.发送E-mail:

用户控件:
Butoon:Button1 
TextBox: TxtSubject
Label:LblUsername

注意:要记得引用Jmail组件

private   void  Button1_Click( object  sender, System.EventArgs e)
         ... {
            
            jmail.Message     Jmail=new   jmail.Message();

            DateTime   t=DateTime.Now;       
            String   Subject=TxtSubject.Text.Trim();;       
            String   body="Hello"+LblUsername.Text.Trim();
            String   FromEmail="eastjazz@163.com";       
            String   ToEmail=LblUseremail.Text.Trim();
            //Silent属性：如果设置为true,JMail不会抛出例外错误.   JMail.   Send(   ()   会根据操作结果返回true或false
            Jmail.Silent=true;
            //Jmail创建的日志，前提loging属性设置为true
            Jmail.Logging=true;
            //字符集，缺省为"US-ASCII"
            Jmail.Charset="GB2312";
            //信件的contentype.   缺省是"text/plain"）   :   字符串如果你以HTML格式发送邮件,   改为"text/html"即可。
            Jmail.ContentType="text/html";
            //添加收件人
            Jmail.AddRecipient(ToEmail,"","");
            Jmail.From=FromEmail;
            //发件人邮件用户名
            Jmail.MailServerUserName="dezaiiloveu"   ;
            //发件人邮件密码
            Jmail.MailServerPassWord="dezaistudio"   ;
            //设置邮件标题
            Jmail.Subject=Subject;
            //邮件添加附件,(多附件的话，可以再加一条Jmail.AddAttachment(   "c:/test.jpg",true,null);)就可以搞定了。［注］：加了附件，讲把上面的Jmail.ContentType="text/html";删掉。否则会在邮件里出现乱码。
            
            //邮件内容
            Jmail.Body=body+t.ToString();
            //Jmail发送的方法
            Jmail.Send("smtp.163.com",false);
            Jmail.Close()   ;

            InkBack.Visible=true;

            InkBack.NavigateUrl="index.aspx";

        }
    }

9.asp.net获取复选框所选的值

方法1:

public   static   string  GetCheckBoxListValue(CheckBoxList CBList)
     ... {
        string strTemp = "";
       
        for (int i = 0; i < CBList.Items.Count; i++)
        ...{
            if (CBList.Items[i].Selected)
            ...{
                if (strTemp == "")
                ...{
                    strTemp = CBList.Items[i].Value;
                }
                else
                ...{
                    strTemp += "," + CBList.Items[i].Value;
                }
            }
        }

        return strTemp;
    }

方法2:

CheckBoxListMessage.Text = "" ;
for  ( int  i = 0 ; i < checkboxlist1.Items.Count; i ++ )
... {
if (checkboxlist1.Items[i].Selected)
...{
   CheckBoxListMessage.Text += checkboxlist1.Items[i].Text + "<br/>";
}
}

10.数据库的备份与恢复

<% @ Page  %>
< HTML >
     < HEAD >
         < title > 获取服务器端数据库列表示例 </ title >
         <%  @Import Namespace = " System.Data "   %>
         <%  @Import Namespace = " System.Data.SqlClient "   %>
         < script language = " C# "  runat = " server " >

//  注意本节的数据库连接字符串
string  ConnStr  =  System.Configuration.ConfigurationSettings.AppSettings[ " conn " ];

void  Page_Load( object  sender, System.EventArgs e)
... {
if(!IsPostBack)
...{
// 创建连接及执行数据库操作
string db_query = "sp_helpdb";

SqlCommand myCommand = new SqlCommand(db_query, new SqlConnection(ConnStr));
myCommand.Connection.Open();
SqlDataReader dr = myCommand.ExecuteReader();

// 将数据库列表绑定到下拉列表控件(DropDownList)
dbDropDownList.DataSource = dr;
dbDropDownList.DataTextField = "name";
dbDropDownList.DataBind();

//关闭DataReader对象和数据库连接
dr.Close();
myCommand.Connection.Close();
}
}

void  dbDropDownList_SelectedIndexChanged( object  sender, System.EventArgs e)
... {
pathTextBox.Text = @"d:BACKUP" + dbDropDownList.SelectedValue + ".bak";
}

void  backupButton_Click( object  sender, System.EventArgs e)
... {
string path = pathTextBox.Text;
string dbname = dbDropDownList.SelectedValue;

string backupSql = "use master;";
backupSql += "backup database @dbname to disk = @path;";

SqlCommand myCommand = new SqlCommand(backupSql, new SqlConnection(ConnStr));

myCommand.Parameters.Add("@dbname", SqlDbType.Char);
myCommand.Parameters["@dbname"].Value = dbname;
myCommand.Parameters.Add("@path", SqlDbType.Char);
myCommand.Parameters["@path"].Value = path;

try
...{
myCommand.Connection.Open();
myCommand.ExecuteNonQuery();
infoLabel.Text = "备份成功";
}
catch(Exception ex)
...{
infoLabel.Text = "备份失败<br/>" + ex.ToString();
}
finally
...{
myCommand.Connection.Close();
}
}

void  restoreButton_Click( object  sender, System.EventArgs e)
... {
string path = pathTextBox.Text;
string dbname = dbDropDownList.SelectedValue;

string restoreSql = "use master;";
restoreSql += "restore database @dbname from disk = @path;";

SqlCommand myCommand = new SqlCommand(restoreSql, new SqlConnection(ConnStr));

myCommand.Parameters.Add("@dbname", SqlDbType.Char);
myCommand.Parameters["@dbname"].Value = dbname;
myCommand.Parameters.Add("@path", SqlDbType.Char);
myCommand.Parameters["@path"].Value = path;

try
...{
myCommand.Connection.Open();
myCommand.ExecuteNonQuery();
infoLabel.Text = "恢复成功";
}
catch(Exception ex)
...{
infoLabel.Text = "恢复失败<br/>" + ex.ToString();
}
finally
...{
myCommand.Connection.Close();
}
}

         </ script >
     </ HEAD >
     < body >
         < form id = " Form1 "  method = " post "  runat = " server " >
             < h3 >& nbsp; </ h3 >
            数据库列表：
             < asp:dropdownlist id = " dbDropDownList "  runat = " server "  AutoPostBack = " True "  OnSelectedIndexChanged = " dbDropDownList_SelectedIndexChanged " ></ asp:dropdownlist >
             < br >
             < br >
            请输入备份目录及备份文件名：
             < asp:textbox id = " pathTextBox "  runat = " server "  Width = " 224px " >
C:BACKUPNorthwind.bak </ asp:textbox > （目录必须存在）
             < br >
             < br >
             < asp:button id = " backupButton "  runat = " server "  Font - Size = " 9pt "  Text = " 备份数据库 "  OnClick = " backupButton_Click " ></ asp:button >
             < asp:button id = " restoreButton "  runat = " server "  Font - Size = " 9pt "  Text = " 恢复数据库 "  OnClick = " restoreButton_Click " ></ asp:button >
             < br >
             < br >
             < asp:Label id = " infoLabel "  runat = " server " ></ asp:Label >
         </ form >
     </ body >
</ HTML >

11.C#防注入函数

   public   string  SafeRequest( string  ParaName, int  ParaType) 
   ... { 
   //如果是1为数字，0为字符串
   string Paravalue=""; 
   Paravalue = ParaName; 
   if (ParaType==1) 
   ...{ 
    if(!(IsNumeric(Paravalue))) 
    ...{ 
     Paravalue="0";
    } 
   } 
   else 
   ...{ 
    Paravalue=Paravalue.Replace("'","’"); 
   } 
   return(Paravalue); 
  }  

   public   static   bool  IsNumeric( string  strData) 
   ... { 
   float fData; 
   bool bValid = true; 
   if(strData.Length>12)
   ...{
    bValid = false;
   }
   else
   ...{
    try 
    ...{ 
     fData = float.Parse(strData); 
    } 
    catch (FormatException) 
    ...{ 
     bValid = false; 
    } 
   }
   return bValid; 
  }


   private   void  Button1_Click( object  sender, System.EventArgs e)
   ... {
   Label1.Text=SafeRequest(TextBox1.Text,1);
  }
 

[ 以上转自“德仔工作室”]