Wife user manual-logic and structure of the Registration System

QQ chat group: 13033480

[Product name] Wife
[Commonly referred to as] shifuer
[Common name] Wife
[English name] Wife
[Chemical name] Married Women
Ingredients: water, protein, fat, nucleic acid, carbohydrate, and a small amount of minerals.
[Physical and chemical properties] acidic; can be divided into one price (married), two price (married), three price (married )...... N price (married ). It is easy to dissolve in confidential words and sweet words; it is difficult to dissolve in white ding if the melting point of diamond, famous car and mansion is reduced.
[Traits] This product is Cola-shaped concave-convex opposite film, smooth surface, coated with a variety of cosmetics, strong affinity for diamond, platinum; shy red, angry green, macula appears over time, wrinkling, but does not affect continued use.
[Function indications] It is used to handle single-person phobia, which has obvious effects on the loss rate and thinking rate. It can also be used to buy and take children with burning and washing.
[Side effects] bronchitis, Ear root softness, visual fatigue, and behavior obstruction. Serious adverse reactions can cause skin damage.
[Usage] A Piece Of Life.
[Contraindications] Take two or more tablets.
[Note]
1. Exercise caution when using Renal Insufficiency
2. Please control the daily usage. The frequency should be properly controlled if the body suffers any discomfort;
3. If you take other medicines at the same time when taking this product, consult the manufacturer; otherwise, the consequences will be borne by yourself;
[Specification] tens of thousands of grams of logs hundreds of thousands of grams, the film weight exceeds the standard does not affect the use, generally 45kg is the best.
[Storage] stored at normal temperature. Avoid getting along with adult women and individual handsome guys. It is strictly prohibited to stay out for the night. It should be stored in a location that is hard for men to come into contact.
[Packaging] all kinds of fashion, shoes, hats, jewelry, handbags, change with the season.
[Validity period] is valid for life.
[Approval No.] See diamond purchase invoice No.
[Production date] Same ID Card Date of birth
[Production enterprise] the father-in-law (only for the father-in-law style ).
This product has three quality packages. If any quality problem occurs, contact the local civil affairs bureau.

 

This is a very popular blog post on the Internet. After reading it, I was shocked by the case. This TMD is the real object-oriented idea ......

This is the real "object ......

Why do people dare to face, face, and entertain objects ......

People know that the most important thing to do with objects is to first figure out what objects are used ......

People know that, if you first get rid of objects, there will be no bad objects ......

I cannot imagine it. In the near future, this object cannot create a personal "class" for him ....

 

I think it is a pity that the author does not learn programming...

 

Previously RegisteredCodeMany netizens are angry after reading it, and the consequences are very serious. They are eager to come to SQL injection.

Many friends, including Ben Daren, did not know about injection n hours ago. Thank you for giving me some advice from netizens. This adult is now learning to sell it now. Let's talk about it in the simplest way. You can enter 1 'or '1' = '1 in the User Name text box. The password is random, the so-called login system is like a virtual system ......

 

There are many ways to solve this problem. An important method is parameterized query.

 

A parameterized query is to use a parameter (parameter class) to give a value where the value or data needs to be filled in when accessing the database. When parametric query is used, the database server does not regard the parameter content as a part of the SQL command for processing. Instead, parameters are applied to run only after the database completes the compilation of the SQL command, therefore, even if the parameter contains commands, it will not be run by the database.

How powerful is parameter? Do you want to be a wife? Let's take a look at the house, Hedong sihoo, and scare off 100,000 million customers ??

Let's add a reference to sqlparameter:

[Home location (ProgramSet Name)] system. Data. dll

[Namespace name] system. Data. sqlclient
[Name] sqlparameter
[Grandparents] system. Object
[Parents] system. financialbyrefobject

[Main function] can be used as an array to store and transmit sqlcommand parameters or parameter groups. Of course, it is used to prevent hacker SQL injection.
[Main drawback] unable to inherit from family members
[Note] the parameter name is case insensitive.

[Production date] the moment of new
[Validity period] when you use it, it will automatically disappear.
[Usage] refer to the following example Program

 

Protected void btnregist_click (Object sender, eventargs e) {string strconnection = configurationmanager. connectionstrings ["netshopconnstring"]. connectionstring; string into text = "insert into users (username, password, name, sex, age, phone, email, QQ) values (@ username, @ password, @ name, @ sex, @ age, @ phone, @ email, @ qq) "; string username = txtusername. text; string Password = txtpassword. text; string name = txtname. Text; string sex = radlsex. selectedvalue; int age = int. parse (txtage. text); string phone = txtphone. text; string email = txtemail. text; string QQ = txtqq. text; sqlparameter [] parms = {New sqlparameter ("@ username", sqldbtype. varchar, 20), new sqlparameter ("@ password", sqldbtype. varchar, 20), new sqlparameter ("@ name", sqldbtype. varchar, 20), new sqlparameter ("@ sex", sqldbtype. varchar, 2), new sqlpa Rameter ("@ age", sqldbtype. INT), new sqlparameter ("@ phone", sqldbtype. varchar, 20), new sqlparameter ("@ email", sqldbtype. varchar, 50), new sqlparameter ("@ qq", sqldbtype. varchar, 20)}; parms [0]. value = username; parms [1]. value = password; parms [2]. value = Name; parms [3]. value = sex; parms [4]. value = age; parms [5]. value = phone; parms [6]. value = Email; parms [7]. value = QQ; sqlcommand cmd = new sqlcom Mand (); sqlconnection conn = new sqlconnection (strconnection); try {If (conn. State! = Connectionstate. open) Conn. open (); cmd. connection = conn; cmd. commandtype = commandtype. text; cmd. commandtext = plain text; foreach (sqlparameter parm in parms) cmd. parameters. add (parm); cmd. executenonquery ();} catch {response. redirect ("errormessage. aspx ");} finally {Conn. close ();} response. redirect ("login. aspx ");}

 

This Code uses logic. Are you familiar with it?

To implement the logic, simply receive the parameters entered in the registration interface, insert them to the database table users, and then jump to the logon interface;

No strange faces except the sqlparameter class?

 

To understand, familiarize with, master, and use a class, the most important thing is to understand what the class is and how it is used. In the two aspects, what the class is doing is the most important, when you know what this class is, how to use it is often self-evident...

 

Let's declare one thing: this code is mainly used to learn the most basic database access technology. It can save the trouble on the interface without adding verification controls, don't take a picture here ......

Copyright: 2012, westgarden. You are welcome to reprint it. Please indicate the source for reprinting. More Article See blog http://www.cnblogs.com/WestGarden/