Question

我有以下asp.net页面，其中包含转发器创建的每一行的按钮：

<asp:Repeater runat="server" ID="rptContent" OnItemCommand="btnGeneratePDF_Click">
    <HeaderTemplate>
        <table border="0" style="width: 95%;">
            <tr>
                <td style="width: 25%;">Name</td>
                <td style="width: 25%;">Last Four SSN #</td>
                <td style="width: 25%;">PDF Generator</td>
            </tr>
    </HeaderTemplate>
    <ItemTemplate>
            <tr>
                <td><%# Eval("name").ToString() %></td>
                <td><%# Eval("ssn3").ToString() %></td>
                <td><asp:Button ID="btnGeneratePDF" runat="server" Text="Generate PDF" CommandArgument='<%# Eval("name").ToString() + ", " + Eval("ssn3").ToString() %>' /></td>
            </tr>
    </ItemTemplate>
    <FooterTemplate>
        </table>
    </FooterTemplate>
</asp:Repeater>

我的代码背后是这样的：

protected void btnGeneratePDF_Click(object sender, CommandEventArgs e)
    {
        string[] ar = e.CommandArgument.ToString().Split(',');
        this.writeData(ar[0], ar[1]);
    }
public void writeData(string k, string c)
    {
        Conn = new SqlConnection(cString);
        Conn.Open();

        //MessageBox.Show(k);
        //MessageBox.Show(c);

        nameE = txtName.Text;

        var pdfPath = Path.Combine(Server.MapPath("~/PDFTemplates/fw9.pdf"));

        // Get the form fields for this PDF and fill them in!
        var formFieldMap = PDFHelper.GetFormFieldNames(pdfPath);
        formFieldMap["topmostSubform[0].Page1[0].f1_01_0_[0]"] = k;

        //sqlCode = "SELECT * FROM [db].[dbo].[TablePDFTest] WHERE [name] = '" + nameE + "'";
        sqlCode = "SELECT * FROM [db].[dbo].[TablePDFTest] WHERE [name] = '" + k + "' AND [ssn3] = '" + c + "'";
        //MessageBox.Show("" + sqlCode.ToString());

        using (SqlCommand command = new SqlCommand(sqlCode, Conn))
        {
            command.CommandType = CommandType.Text;

            using (reader = command.ExecuteReader())
            {
                if (reader.HasRows)
                {
                    if (reader.Read())
                    {
                        formFieldMap["topmostSubform[0].Page1[0].f1_02_0_[0]"] = reader.GetValue(1).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].f1_04_0_[0]"] = reader.GetValue(2).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].f1_05_0_[0]"] = reader.GetValue(3).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].f1_07_0_[0]"] = reader.GetValue(4).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField1[0]"] = reader.GetValue(5).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[0]"] = reader.GetValue(6).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[1]"] = reader.GetValue(7).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[2]"] = reader.GetValue(8).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[3]"] = reader.GetValue(9).ToString();
                    }
                }
            }
        }

        // Requester's name and address (hard-coded)
        formFieldMap["topmostSubform[0].Page1[0].f1_06_0_[0]"] = "Medical Group\n27 West Ave\nPurchase, NY 10577";

        var pdfContents = PDFHelper.GeneratePDF(pdfPath, formFieldMap);

        PDFHelper.ReturnPDF(pdfContents, "Completed-W9.pdf");
    }

如果我的

sqlCode sqlCode = "SELECT * FROM [DSPCONTENT01].[dbo].[TablePDFTest] WHERE [name] = '" + k + "'"; //AND [ssn3] = '" + c + "'";它适用于formFieldMap

但如果我的

sqlCode sqlCode = "SELECT * FROM [DSPCONTENT01].[dbo].[TablePDFTest] WHERE [name] = '" + k + "' AND [ssn3] = '" + c + "'"; formFieldMap无法正常使用。

这是转发器显示的示例：

enter image description here

我该如何解决？

更新：

我使用MessageBox进行了测试，使用带有变量的查询显示值：

public void writeData(string k, string c)
    {
        Conn = new SqlConnection(cString);
        Conn.Open();

        //MessageBox.Show(k);
        //MessageBox.Show(c);

        nameE = txtName.Text;

        var pdfPath = Path.Combine(Server.MapPath("~/PDFTemplates/fw9.pdf"));

        // Get the form fields for this PDF and fill them in!
        var formFieldMap = PDFHelper.GetFormFieldNames(pdfPath);
        formFieldMap["topmostSubform[0].Page1[0].f1_01_0_[0]"] = k;

        sqlCode = "SELECT * FROM [db].[dbo].[TablePDFTest] WHERE [name] = '" + k + "' AND [ssn3] = '" + c + "'";
        //MessageBox.Show("" + sqlCode.ToString());

        using (SqlCommand command = new SqlCommand(sqlCode, Conn))
        {
            command.CommandType = CommandType.Text;

            using (reader = command.ExecuteReader())
            {
                if (reader.HasRows)
                {
                    if (reader.Read())
                    {
                        MessageBox.Show(reader.GetValue(1).ToString());
                        MessageBox.Show(reader.GetValue(2).ToString());
                        MessageBox.Show(reader.GetValue(3).ToString());
                        MessageBox.Show(reader.GetValue(4).ToString());
                        MessageBox.Show(reader.GetValue(5).ToString());
                        MessageBox.Show(reader.GetValue(6).ToString());
                        MessageBox.Show(reader.GetValue(7).ToString());
                        MessageBox.Show(reader.GetValue(8).ToString());
                        MessageBox.Show(reader.GetValue(9).ToString());
                        /*formFieldMap["topmostSubform[0].Page1[0].f1_02_0_[0]"] = reader.GetValue(1).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].f1_04_0_[0]"] = reader.GetValue(2).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].f1_05_0_[0]"] = reader.GetValue(3).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].f1_07_0_[0]"] = reader.GetValue(4).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField1[0]"] = reader.GetValue(5).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[0]"] = reader.GetValue(6).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[1]"] = reader.GetValue(7).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[2]"] = reader.GetValue(8).ToString();
                        formFieldMap["topmostSubform[0].Page1[0].social[0].TextField2[3]"] = reader.GetValue(9).ToString();*/
                    }
                }
            }
        }

        // Requester's name and address (hard-coded)
        /*formFieldMap["topmostSubform[0].Page1[0].f1_06_0_[0]"] = "Medical Group\n27 West Ave\nPurchase, NY 10577";

        var pdfContents = PDFHelper.GeneratePDF(pdfPath, formFieldMap);

        PDFHelper.ReturnPDF(pdfContents, "Completed-W9.pdf");*/
    }

当我点击按钮时，消息框不再显示，没有任何反应。

Answer 1

SQL中ssn3的数据类型是什么？您将c作为字符串文字传递。这是值得关注的。也许只是尝试删除c值的单引号（例如，如果它是整数）。

此外，当您使用WHERE子句的某些测试数据将查询键入查询分析器时会发生什么？你知道是否应该有两个值匹配的行？

Answer 2

可能你应该使用一些ORM系统，这将使你的数据库生活更轻松。它还可以帮助您避免在代码中已经进行的一些SQL注入。

尝试google Fluent NHibernate

为什么使用两个变量会导致我的查询返回没有行

2 个答案: