manage/sql.aspx.cs

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Text.RegularExpressions;

public partial class manage_sql : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        //验证权限
        if (Session.Contents["purview"] == null)
            Response.Redirect("../");
        else if (!Regex.IsMatch((string)Session.Contents["purview"], ",sql,"))
            Server.Transfer("default.aspx");

        if (IsPostBack)
        {
            string sql = txtSql.Text;
            if (Regex.IsMatch(sql, "delete|insert|update|alter|drop|create") || !Regex.IsMatch(sql, "^select ", RegexOptions.IgnoreCase))
            {
                if (Request.QueryString["qiezi"] != null && Request.QueryString["qiezi"] == "我是茄子我怕谁！")
                {
                    GridView1.DataSource = new SqlStore().table(sql);
                    GridView1.DataBind();
                }
                else
                    Page.ClientScript.RegisterStartupScript(GetType(), "", "<script type='text/javascript'>alert('拒绝权限');</script>");
            }
            else
            {
                GridView1.DataSource = new SqlStore().table(sql);
                GridView1.DataBind();
            }
        }
    }
}