一度空间

no intetion of cooling....
posts - 35, comments - 25, trackbacks - 0, articles - 0

SQL

防止Sql注入字符串 , 变量赋值时防止为空和类型转换

     摘要: sSql = Replace(sSql, "'", "")
sSql = Replace(sSql, "--", "")

If AInpt Is Nothing Or AInpt Is DBNull.Value Then '根据情况变化
Return ""  阅读全文

posted @ 2007-11-29 09:56 liangyi_neil 阅读(110) | 评论 (0)  编辑 |