oracle中对types的权限管理,通用权限管理系统组件 (GPM - General Permissions Manager) 中超级经典的...

//-----------------------------------------------------------------//All Rights Reserved , Copyright (C) 2012 , Hairihan TECH, Ltd.//-----------------------------------------------------------------

using System;

using System.Data;

using System.Collections.Generic;

using DotNet.Utilities;

using DotNet.Business;

//////DbTools///静态数据库访问的方法程序//////修改纪录//////2012-02-14 版本：1.0 JiRiGaLa 整理例子程序功能。//////版本：1.0/////////JiRiGaLa///2012-02-14//////publicpartialclass DbTools : System.Web.UI.Page

{

protectedvoid Page_Load(object sender, EventArgs e)

{

//静态方法调用数据库的方法this.StaticMethod();

}

privatevoid StaticMethod()

{

//设置数据库连接        DotNet.Utilities.DbHelper.DbConnection = "Data Source=localhost;Initial Catalog=UserCenterV36;User Id = sa ; Password = Password@1234;";

//设置数据库类型        DotNet.Utilities.DbHelper.DbType = CurrentDbType.SqlServer;

//DotNet.Utilities.DbHelper.DbType = CurrentDbType.Oracle;//DotNet.Utilities.DbHelper.DbType = CurrentDbType.MySql;//DotNet.Utilities.DbHelper.DbType = CurrentDbType.DB2;//DotNet.Utilities.DbHelper.DbType = CurrentDbType.Access;//DotNet.Utilities.DbHelper.DbType = CurrentDbType.SQLite;

this.Fill();

this.ExecuteNonQuery();

this.ExecuteScalar();

this.ExecuteReader();

}

//////Fill///静态方法调用数据库的方法///privatevoid Fill()

{

//1：直接执行string commandText = @"SELECT *

FROM BASE_USER

WHERE DeletionStateCode = 0";

DataTable dataTable = DotNet.Utilities.DbHelper.Fill(commandText);

//2：防注入的安全的参数化运行方式执行查询        commandText = @"SELECT *

FROM BASE_USER

WHERE Code =" + DotNet.Utilities.DbHelper.GetParameter("Code")

+ "AND DeletionStateCode =" + DotNet.Utilities.DbHelper.GetParameter("DeletionStateCode");

//这里是生成安全参数的方法        List dbParameters = new List();

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("Code", "jirigala"));

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("DeletionStateCode", 0));

DotNet.Utilities.DbHelper.Fill(commandText, dbParameters.ToArray());

//3：执行存储过程，假设也是需要传递这2个参数，类似功能的一个存储过程//我们不建议用存储过程，因为会对系统移植，多数据库设计等上会遇到很多麻烦        commandText = "GET_USER";

dataTable = DotNet.Utilities.DbHelper.Fill(commandText, dbParameters.ToArray(), CommandType.StoredProcedure);

}

//////ExecuteNonQuery///静态方法调用数据库的方法//////影响行数privateint ExecuteNonQuery()

{

int returnValue = 0;

//1：直接执行string commandText = @"UPDATE BASE_USER

SET DELETIONSTATECODE = 0";

returnValue = DotNet.Utilities.DbHelper.ExecuteNonQuery(commandText);

//2：防注入的安全的参数化运行方式执行查询        commandText = @"UPDATE BASE_USER

SET DELETIONSTATECODE = 0

WHERE CODE =" + DotNet.Utilities.DbHelper.GetParameter("Code")

+ "AND DELETIONSTATECODE =" + DotNet.Utilities.DbHelper.GetParameter("DeletionStateCode");

//这里是生成安全参数的方法        List dbParameters = new List();

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("Code", "jirigala"));

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("DeletionStateCode", 0));

returnValue = DotNet.Utilities.DbHelper.ExecuteNonQuery(commandText, dbParameters.ToArray());

//3：执行存储过程，假设也是需要传递这2个参数，类似功能的一个存储过程//我们不建议用存储过程，因为会对系统移植，多数据库设计等上会遇到很多麻烦        commandText = "UPDATE_USER";

returnValue = DotNet.Utilities.DbHelper.ExecuteNonQuery(commandText, dbParameters.ToArray(), CommandType.StoredProcedure);

return returnValue;

}

//////ExecuteScalar///静态方法调用数据库的方法//////结果privateobject ExecuteScalar()

{

object returnValue = null;

//1：直接执行string commandText = @"SELECT CODE

FROM BASE_USER

WHERE DELETIONSTATECODE = 0";

returnValue = DotNet.Utilities.DbHelper.ExecuteScalar(commandText);

//2：防注入的安全的参数化运行方式执行查询        commandText = @"SELECT CODE

FROM BASE_USER

WHERE  CODE =" + DotNet.Utilities.DbHelper.GetParameter("Code")

+ "AND DELETIONSTATECODE =" + DotNet.Utilities.DbHelper.GetParameter("DeletionStateCode");

//这里是生成安全参数的方法        List dbParameters = new List();

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("Code", "jirigala"));

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("DeletionStateCode", 0));

returnValue = DotNet.Utilities.DbHelper.ExecuteScalar(commandText, dbParameters.ToArray());

//3：执行存储过程，假设也是需要传递这2个参数，类似功能的一个存储过程//我们不建议用存储过程，因为会对系统移植，多数据库设计等上会遇到很多麻烦        commandText = "GET_USER";

returnValue = DotNet.Utilities.DbHelper.ExecuteScalar(commandText, dbParameters.ToArray(), CommandType.StoredProcedure);

return returnValue;

}

//////ExecuteReader///静态方法调用数据库的方法///privatevoid ExecuteReader()

{

//1：直接执行string commandText = @"SELECT *

FROM BASE_USER

WHERE DELETIONSTATECODE = 0";

DotNet.Utilities.DbHelper.ExecuteReader(commandText);

//2：防注入的安全的参数化运行方式执行查询        commandText = @"SELECT *

FROM BASE_USER

WHERE CODE =" + DotNet.Utilities.DbHelper.GetParameter("Code")

+ "AND DELETIONSTATECODE =" + DotNet.Utilities.DbHelper.GetParameter("DeletionStateCode");

//这里是生成安全参数的方法        List dbParameters = new List();

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("Code", "jirigala"));

dbParameters.Add(DotNet.Utilities.DbHelper.MakeParameter("DeletionStateCode", 0));

DotNet.Utilities.DbHelper.ExecuteReader(commandText, dbParameters.ToArray());

//3：执行存储过程，假设也是需要传递这2个参数，类似功能的一个存储过程//我们不建议用存储过程，因为会对系统移植，多数据库设计等上会遇到很多麻烦        commandText = "GET_USER";

DotNet.Utilities.DbHelper.ExecuteReader(commandText, dbParameters.ToArray(), CommandType.StoredProcedure);

}

}