一度空间

no intetion of cooling....

导航

随笔分类 -  SQL

防止Sql注入字符串 , 变量赋值时防止为空和类型转换

摘要：sSql = Replace(sSql, "'", "") sSql = Replace(sSql, "--", "") If AInpt Is Nothing Or AInpt Is DBNull.Value Then '根据情况变化 Return "" 阅读全文

posted @ 2007-11-29 09:56 liangyi_neil 阅读(557) 评论(0) 推荐(0)