Ò׽ؽØÍ¼Èí¼þ¡¢µ¥Îļþ¡¢Ãâ°²×°¡¢´¿ÂÌÉ«¡¢½ö160KB

·ÀÖ¹SQL×¢Èë

Ô­ÎĵØÖ·:http://hi.baidu.com/%BC%D9%BA%EC%D2%B6%CE%E8%CE%F7%B7%E7/blog/item/81f35da209e287abcbefd005.html
1. ʲôÊÇSQL×¢Èë
ËùνSQL×¢È룬¾ÍÊÇͨ¹ý°ÑSQLÃüÁî²åÈëµ½Web±íµ¥µÝ½»»òÊäÈëÓòÃû»òÒ³ÃæÇëÇóµÄ²éѯ×Ö·û´®£¬×îÖÕ´ïµ½ÆÛÆ­·þÎñÆ÷Ö´ÐжñÒâµÄSQLÃüÁͨ¹ýµÝ½»²ÎÊý¹¹ÔìÇÉÃîµÄSQLÓï¾ä£¬´Ó¶ø³É¹¦»ñÈ¡ÏëÒªµÄÊý¾Ý¡£
2. SQL×¢ÈëµÄÖÖÀà
´Ó¾ßÌå¶øÑÔ£¬SQL×¢Èë¿É·ÖΪÎå´óÀ࣬·Ö±ðÊÇ£ºÊý×ÖÐÍ×¢Èë¡¢×Ö·ûÐÍ×¢Èë¡¢ËÑË÷ÐÍ×¢È루like£©¡¢inÐ͵Ä×¢Èë¡¢¾äÓïÁ¬½ÓÐÍ×¢Èë¡£´ÓÓ¦ÓÃÀ´Ëµ£¬ÒªÌرð×¢ÒâIP¡¢ËÑË÷¡¢ÅúÁ¿É¾³ý¡¢´ÓÊý¾Ý¿âתµ½Êý¾Ý¿âµÈµØ·½µÄSQL×¢Èë¡£
3. ÈçºÎ·ÀÖ¹SQL×¢Èë
3.1 SQL×¢Èë²úÉúµÄÔ­Òò
¿´ÏÂÃæ¼ì²éµÇ½µÄSQLÓï¾ä£º
SQL´úÂë
SqlCommand cmd = new SqlCommand("SELECT * from PE_USERS WHERE UserName = '"
+ UserName + "' AND UserPassword = '" + PassWord + "'", conn);
ÓÉÓÚûÓжÔUserNameºÍPassWord½øÐÐÈκÎÑéÖ¤£¬Èç¹ûUserName=” admin’ OR 1=1--“
ËùÖ´ÐеÄSQLÓï¾ä¾Í³ÉÁË£º
SQL´úÂë
SELECT * from PE_USERS WHERE UserName=’admin’ OR 1=1—‘ AND UserPassword=’’
Õâ¾ÍÔì³ÉÁËSQL×¢È룬Ìõ¼þÓÀÔ¶ÎªÕæ£¬Ò²¾Í²»ÓÃÃÜÂëÒ²Äܵǽ³É¹¦¡£
3.2Ö÷Òª·ÀÓù·½Ê½
·ÀÓùÊÖ¶ÎÒ»:²ÎÊý»¯²éѯ
±£»¤¼¶±ð£º¡ï¡ï¡ï¡ï¡ï
ÃèÊö:
ʹÓòÎÊý»¯²éѯµÄºÃ´¦£º¿ÉÒÔ·ÀÖ¹sql×¢Èëʽ¹¥»÷£¬Ìá¸ß³ÌÐòÖ´ÐÐЧÂÊ¡£
ÀýÈç:
SQL´úÂë
const string strSql = "SELECT * from [PE_Users] WHERE UserName = @UserName";
Parameters parms = new Parameters("@UserName", DbType.String, userName);
ÖÐÓÐÒ»¸ö²ÎÊý@UserName, ʹÓÃPrarmeter¶ÔÏó£¬Í¨¹ýËü°Ñ²ÎÊýÌí¼Óµ½Command¶ÔÏóÉÏ£¬
ÕâÑù¾Í»ñµÃ²ÎÊý»¯²éѯ¡£
14
14 °²È«¿ª·¢ÊÖ²á
ÈçÉÏÊöÓï¾ä,ADO.NET »áÏòSQL Server ·¢ËÍÏÂÃæµÄSQLÓï¾ä:
SQL´úÂë
Exec sp_executesql N ‘select * from [pe_users] where username=@username ‘,N
‘@username nvarchar(20) ‘,@username=N ‘name’
SQL Server °Ñ@username Ìæ»»³É×Ö·û´®”name”,È»ºóÔÙÖ´Ðвéѯ.
¼ÙÉèÓÐÏÂÃæµÄÊäÈë:
SQL´úÂë
‘ union select @@version,null,null—
Éú³ÉµÄSQLÓï¾äÈçÏÂËùʾ:
SQL´úÂë
Exec sp_executesql N ‘select * from [pe_users] where username=@username &


Ïà¹ØÎĵµ£º

SQLʱ¼äº¯ÊýÏê½â

1. µ±Ç°ÏµÍ³ÈÕÆÚ¡¢Ê±¼ä
select getdate() 
2. dateadd ÔÚÏòÖ¸¶¨ÈÕÆÚ¼ÓÉÏÒ»¶Îʱ¼äµÄ»ù´¡ÉÏ£¬·µ»ØÐµĠdatetime Öµ
ÀýÈ磺ÏòÈÕÆÚ¼ÓÉÏ2Ìì
select dateadd(day,2,'2004-10-15') --·µ»Ø£º2004-10-17 00:00:00.000
3. datediff ·µ»Ø¿çÁ½¸öÖ¸¶¨ÈÕÆÚµÄÈÕÆÚºÍʱ¼ä ......

Linq to SQL DataContext Lifetime Management


Linq to SQL uses a DataContext to manage it's access to the database as well as tracking changes made to entities retrieved from the database. Linq to SQL has a persistent approach to managing its 'connection' to the database via this data context and it basically assumes that you use a single Dat ......

Õë¶Ô SAP Êý¾Ý¿âά»¤ SQL Server µÄÊ®´ó×î¼Ñʵ¼ù


×÷Õß
£º
Takayuki Hoshino
׫¸åÈË
£º
Juergen Thomas
¼¼
Êõ
ÉóÔÄÈË
£º
Sanjay Mishra
SQL Server Ϊ SAP Ó¦ÓóÌÐòÌṩÁË׿ԽµÄÊý¾Ý¿âƽ̨¡£ÏÂÁн¨Òé¸ÅÊöÁËÕë¶Ô SAP ʵÏÖά»¤ SQL Server Êý¾Ý¿âµÄ×î¼Ñ×ö·¨¡£
ÿÌìÖ´ÐÐÍêÕûÊý¾Ý¿â±¸·Ý
´Ó
¼¼Êõ½Ç¶ÈÀ´Ëµ£¬Áª»ú±¸·Ý SAP Êý¾Ý¿â²»³ÉÎÊÌâ¡£ÕâÒâζ×Å£¬×îÖ ......

PL/SQL DEVELOPER »ù±¾Ó÷¨Ïê½â£¨×ª£©

PL/SQL DEVELOPER »ù±¾Ó÷¨Ïê½â(½¨Òéд¹ýµÚÒ»¸ö´æ´¢¹ý³ÌºóµÄ³õÊֱضÁ)
  
ÓùýoracleµÄ¶¼±§Ô¹£¬ÎªÁËÎȶ¨ ËüÌṩµÄͼÐλ¯²Ù×÷ ËÙ¶ÈÂýµÄÈÃÈËÉËÐÄѽ£¬p4+128MµÄ»úÆ÷Ö»ÒªÆô¶¯Ò»¸ö
  
oracle·þÎñ¾Í¹»ÈÃÈËÉËÐĵģ¬ÔÙÔÚdba studioÀïÃæ²Ù×÷ÕæÄÜÈÃÈ˿ޡ£
  pl/sql developerÕýÊǽâ¾öÕâ¸öÎÊÌâµ ......

ms sql³£ÓÃÓï¾ä(¸ù¾ÝÐèÒªËæÊ±¸üÐÂ)


²éÑ¯ÖØ¸´Öµ£¬ÏÔʾ³ö²»Öظ´µÄ²¿·Ö
select distinct(employeeid) from orders
²éѯÁ½¸ö±íÖ®¼äÏàͬÊý¾Ý
select orders.EmployeeID,Employees.EmployeeID
from orders  INNER JOIN Employees
on Employees.EmployeeID=orders.EmployeeID
ʵÏÖÄ¿µÄ£¬Ò»¸ö±í´æ·ÅÓû§±àºÅºÍÓû§Ãû£¬ÔÚÁíÒ»¸ö±íÖпÉÒÔ¸ù¾ÝÓû§±àº ......
© 2009 ej38.com All Rights Reserved. ¹ØÓÚE½¡ÍøÁªÏµÎÒÃÇ | Õ¾µãµØÍ¼ | ¸ÓICP±¸09004571ºÅ