Ejemplo n.º 1
0
        internal string GetZXRQ(string slbh)
        {
            string sql = @"select zx.djrq from dj_xgdjzx zx
left join dj_xgdjgl djgl on zx.slbh = djgl.zslbh
left join dj_dy dy on dy.slbh=djgl.fslbh
where dy.slbh = '{0}'";

            sql = string.Format(sql, slbh);
            if (IsHasSQLInject(sql))
            {
                return(null);
            }
            object o = OleDBHelper.ExScalar(sql);

            if (null != o)
            {
                return(o.ToString());
            }
            return("");
        }