【发布时间】:2020-12-09 11:12:38
【问题描述】:
如果有人可以在这里帮助我,我将不胜感激:
我有两个下拉列表,并在 C# 报告页面中添加了第三个(类别),如何从 sql server 获取所有下拉列表的数据。
第一个下拉列表:ddlReportType 第二个下拉列表:ddlGroup 第三个下拉列表:ddlcategory
下面是我的代码:
public void Reportquery()
{
switch (this.ddlReportType.SelectedValue)
{
case "1":
//successfully Loaded
switch (ddlGroup.SelectedValue)
{
case "All":
Session["Select_Query"] = "Select ID, CONVERT(CHAR(10), SCAN_DATE, 111) SCAN_DATE,Substring(SUBSCRIBER,1,20) DEALER_ID," + " MSISDN,FILE_PATH,USERNAME, Category, 'File Uploaded' Report_Criteria from UPLOAD where scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "'";
Session["Count_Query"] = "Select Count(*) as Cnt from UPLOAD" + " where scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "'";
break;
default:
Session["Select_Query"] = "Select ID, CONVERT(CHAR(10), SCAN_DATE, 111) SCAN_DATE,Substring(SUBSCRIBER,1,20) DEALER_ID," + " MSISDN,FILE_PATH,USERNAME,Category, 'File Uploaded' Report_Criteria from UPLOAD " + " where scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "' and rtrim(ltrim(Subscriber)) ='" + ddlGroup.SelectedItem.Text.Trim() + "'";
Session["Count_Query"] = "Select Count(*) as Cnt from UPLOAD" + " where scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "' and rtrim(ltrim(Subscriber)) ='" + ddlGroup.SelectedItem.Text.Trim() + "'";
break;
}
break;
case "2":
//Failed to laod
switch (ddlGroup.SelectedValue)
{
case "All":
Session["Select_Query"] = "Select Value as ID, CONVERT(CHAR(10), SCAN_DATE, 111) SCAN_DATE, SUBSCRIBER as Dealer_ID, " + " FileName as MSISDN,File_Path, username, Category, 'File Rejected' as Report_Criteria from CRI_Rejected a, code_rejected b " + " where a.Rejection_Code=b.id and scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "'";
Session["Count_Query"] = "Select count(a.ID) as cnt from CRI_Rejected a, code_rejected b " + " where a.Rejection_Code=b.id and scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "'";
break;
default:
Session["Select_Query"] = "Select Value as ID, CONVERT(CHAR(10), SCAN_DATE, 111) SCAN_DATE, SUBSCRIBER as Dealer_ID, " + " FileName as MSISDN,File_Path, username, Category, 'File Rejected' as Report_Criteria from CRI_Rejected a, code_rejected b " + " where a.Rejection_Code=b.id and scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "'" + " and rtrim(ltrim(Subscriber)) ='" + ddlGroup.SelectedItem.Text.Trim() + "'";
Session["Count_Query"] = "select count(*) as cnt from CRI_Rejected where scan_date between'" + cldrFrom.SelectedValue + "' and '" + cldrTo.SelectedValue + "'" + " and rtrim(ltrim(Subscriber)) ='" + ddlGroup.SelectedItem.Text.Trim() + "'";
break;
}
break;
}
}
【问题讨论】:
-
请parameterise your queries 避免出现巨大的安全漏洞。
标签: c# sql asp.net database dropdown