public static DataSet GetDataSet(string sql,ref string msg) { if(AccessDB.isVirus(sql)) { return null; } string constr=AccessDB.GetConnStr(); System.Data.OleDb.OleDbConnection oc=new OleDbConnection(); oc.ConnectionString =constr; System.Data.OleDb.OleDbDataAdapter odap=new OleDbDataAdapter(sql,oc); DataSet ds=new DataSet(); try { if(oc.State ==ConnectionState.Closed) { oc.Open(); } odap.Fill (ds); oc.Close(); } catch(Exception e) { //// throw e; oc.Close(); msg=e.Message.Trim(); return null; } return ds; }
public static string ExecSQL(string sql) { if(AccessDB.isVirus(sql)) { return null; } string constr=AccessDB.GetConnStr(); System.Data.OleDb.OleDbConnection oc1=new OleDbConnection(constr); System.Data.OleDb.OleDbCommand ocmd1=new OleDbCommand(sql,oc1); try { if(ocmd1.Connection.State ==ConnectionState.Open) { ocmd1.Connection.Close(); } ocmd1.Connection.Open(); ocmd1.ExecuteNonQuery(); oc1.Close(); } catch(Exception e) { //throw e; oc1.Close(); return e.Message+e.StackTrace; } return null; }