一度空间

no intetion of cooling....
posts - 23, comments - 27, trackbacks - 0, articles - 0

SQL

防止Sql注入字符串 , 变量赋值时防止为空和类型转换

摘要: sSql = Replace(sSql, "'", "")
sSql = Replace(sSql, "--", "")

If AInpt Is Nothing Or AInpt Is DBNull.Value Then '根据情况变化
Return ""阅读全文

posted @ 2007-11-29 09:56 liangyi_neil 阅读(304) | 评论 (0) 编辑 |