數(shù)據(jù)庫參數(shù)化傳遞可以增強數(shù)據(jù)的安全性,但卻會降低開發(fā)效率,為此創(chuàng)建了如下函數(shù)以解決這個問題:
public static string PRepareParameter(string sql, out SqlParameter[] cmdParms, params object[] args) { cmdParms = null; if (args != null && args.Length != 0) { string[] argNames = new string[args.Length]; cmdParms = new SqlParameter[args.Length]; string prefix = "arg"; for (int i = 0, c = args.Length; i < c; i++) { string ParameterName = prefix + i; cmdParms[i] = new SqlParameter(); cmdParms[i].ParameterName = ParameterName; cmdParms[i].Value = args[i]; argNames[i] = "@" + ParameterName; } sql = string.Format(sql, argNames); } return sql; }
使用方法如下:
新聞熱點
疑難解答