Publics/FileDeleteXB.ashx.cs

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.IO;
using System.Data;
using System.Data.SqlClient;
using System.Text;
using System.Web.SessionState;

namespace 客户订单管理2
{
    public class FileDeleteXB : IHttpHandler, IRequiresSessionState
    {
        SqlCommandBuilder scb;
        SqlDataAdapter 数据适配器;
        SqlConnection 数据连接;
        DataTable 主表 = new DataTable();

        public void ProcessRequest(HttpContext context)
        {
            #region 权限检查
            if (context.Session["login"] == null || context.Session["login"].ToString() != "true")
            {
                context.Response.Write("<script>top.location.href='../Default.aspx';</script>");
                context.Response.End();
                return;
            }
            if (!系统.权限检查(context.Session["pageTitle"].ToString(), context.Session["username"].ToString(), context.Session["userclass"].ToString()))
            {
                context.Response.Write("<script>alert('缺少访问权限 ！（请联系管理员）');</script>");
                context.Response.Write("<script>history.go(-1);</script>");
                context.Response.End();
                return;
            }
            #endregion
            
            string tableName = context.Request.QueryString["Table"].ToString();
            tableName = 系统.解密(tableName.Replace("_", "+"), 系统.key2, 系统.iv2);
            string fieldName = context.Request.QueryString["Field"].ToString();
            fieldName = 系统.解密(fieldName.Replace("_", "+"), 系统.key2, 系统.iv2);
            string keyName = context.Request.QueryString["Key"].ToString();
            keyName = 系统.解密(keyName.Replace("_", "+"), 系统.key2, 系统.iv2);
            string keyValue = context.Request.QueryString["keyValue"].ToString();
            keyValue = 系统.解密(keyValue.Replace("_", "+"), 系统.key2, 系统.iv2);
            string sql = "SELECT " + keyName + "," + fieldName + "," + fieldName + "_" + " FROM " + tableName + " WHERE " + keyName + "='" + keyValue + "'";
            数据连接 = new SqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings["默认连接_3HK0R6GAS"].ConnectionString);
            数据适配器 = new SqlDataAdapter();
            数据适配器.SelectCommand = new SqlCommand(sql, 数据连接);
            scb = new SqlCommandBuilder(数据适配器);
            try
            {
                数据连接.Open();
                数据适配器.Fill(主表);
                主表.Rows[0][fieldName] = DBNull.Value;
                主表.Rows[0][fieldName + "_"] = DBNull.Value;
                数据适配器.Update(主表);
            }