public bool check_Num(string ss) { if (ss.Length == 0) { labelMsg.Text = ""; return(true); } if (ss.Length != 8) { return(false); } foreach (char s in ss) { if (!Char.IsNumber(s)) { return(false); } } if (!CheckSQL.IsSafeSqlString(ss)) { return(false); } labelMsg.Text = ""; return(true); }
protected void insertMsg() { initLab(); string num = tbox0.Text; if (num.Length != 8 || !CheckSQL.IsSafeSqlString(num)) { lab0.Text = "学号格式错误"; labMsg.Text = "插入错误"; return; } foreach (char s in num) { if (!Char.IsNumber(s)) { lab0.Text = "学号格式错误"; labMsg.Text = "插入错误"; return; } } string name, sex, age, profession; name = tbox1.Text; age = tbox3.Text; if (!CheckSQL.IsSafeSqlString(name)) { lab1.Text = "学号格式错误"; labMsg.Text = "插入错误"; return; } foreach (char s in age) { if (!Char.IsNumber(s)) { lab3.Text = "年龄格式错误"; labMsg.Text = "插入错误"; return; } } if (!CheckSQL.IsSafeSqlString(age)) { lab3.Text = "学号格式错误"; labMsg.Text = "插入错误"; return; } sex = dlist2.SelectedValue; profession = dlist4.SelectedValue; MySqlDataReader sdr1; sdr1 = getSDR("select NAME,AGE,SEX,PROFESSIONID from student where ID = " + num); if (sdr1.Read()) { try { if ((name != "" && name != sdr1.GetValue(0).ToString()) || (age != "" && age != sdr1.GetValue(1).ToString()) || (sex != "0" && sex != sdr1.GetValue(2).ToString()) || (profession != "0" && profession != sdr1.GetValue(3).ToString())) { lab1.Text = "学号已存在"; labMsg.Text = "插入错误"; return; } } catch { labMsg.Text = "出错啦^_^"; sdr1.Close(); return; } sdr1.Close(); if (dlist5.SelectedValue != "0") { try { sdr1 = getSDR("insert into reward values(" + num + "," + dlist5.SelectedValue + ")"); } catch { labMsg.Text = "出错啦^_^"; sdr1.Close(); return; } sdr1.Close(); labMsg.Text = "插入信息成功:</p>" + "学号:" + num + "</p>" + "奖励:" + dlist5.SelectedItem.Text + "</p>"; } else { labMsg.Text = "你啥也不添加是什么鬼=.="; } } else { sdr1.Close(); if (name == "") { lab1.Text = "姓名不能为空"; labMsg.Text = "插入错误"; return; } if (sex == "0") { lab2.Text = "性别不能为空"; labMsg.Text = "插入错误"; return; } if (age == "") { lab3.Text = "年龄不能为空"; labMsg.Text = "插入错误"; return; } if (profession == "0") { lab4.Text = "专业不能为空"; labMsg.Text = "插入错误"; return; } byte[] utf8 = Encoding.UTF8.GetBytes(name); name = Encoding.UTF8.GetString(utf8);; try { sdr1 = getSDR("insert into student values(" + num + ",'" + name + "'," + sex + "," + age + "," + profession + ")"); } catch { labMsg.Text = "出错啦^_^"; sdr1.Close(); return; } sdr1.Close(); labMsg.Text = "插入信息成功:</p>" + "学号:" + num + "</p>" + "姓名:" + name + "</p>" + "性别:" + dlist2.SelectedItem.Text + "</p>" + "年龄:" + age + "</p>" + "专业:" + dlist4.SelectedItem.Text + "</p>"; if (dlist5.SelectedValue != "0") { try { sdr1 = getSDR("insert into reward values(" + num + "," + dlist5.SelectedValue + ")"); } catch { labMsg.Text = "出错啦^_^"; sdr1.Close(); return; } sdr1.Close(); labMsg.Text += "奖励:" + dlist5.SelectedItem.Text; } } }