public static DataSet GetDataSet(string sql,ref string msg)
{
if(AccessDB.isVirus(sql))
{
return null;
}
string constr=AccessDB.GetConnStr();
System.Data.OleDb.OleDbConnection oc=new OleDbConnection();
oc.ConnectionString =constr;
System.Data.OleDb.OleDbDataAdapter odap=new OleDbDataAdapter(sql,oc);
DataSet ds=new DataSet();
try
{
if(oc.State ==ConnectionState.Closed)
{
oc.Open();
}
odap.Fill (ds);
oc.Close();
}
catch(Exception e)
{
//// throw e;
oc.Close();
msg=e.Message.Trim();
return null;
}
return ds;
}
public static string ExecSQL(string sql)
{
if(AccessDB.isVirus(sql))
{
return null;
}
string constr=AccessDB.GetConnStr();
System.Data.OleDb.OleDbConnection oc1=new OleDbConnection(constr);
System.Data.OleDb.OleDbCommand ocmd1=new OleDbCommand(sql,oc1);
try
{
if(ocmd1.Connection.State ==ConnectionState.Open)
{
ocmd1.Connection.Close();
}
ocmd1.Connection.Open();
ocmd1.ExecuteNonQuery();
oc1.Close();
}
catch(Exception e)
{
//throw e;
oc1.Close();
return e.Message+e.StackTrace;
}
return null;
}