asp 删除数据库记录的代码
asp 删除数据库记录的代码
发布时间:2016-12-29 来源:查字典编辑
摘要:删除单条记录复制代码代码如下:id=saferequest("id")sql="deletefromtable1wherewhereid>"...

删除单条记录

复制代码 代码如下:

id = saferequest("id")

sql="delete from table1 where whereid>"&id&""

rs.open sql,conn,1,3

response.write "<script>alert('删除成功');location.href='del.asp';</script>"

set rs=nothing

set conn=nothing

这是过滤非法字符函数

复制代码 代码如下:

function saferequest(paraname)

dim paravalue

paravalue=request(paraname)

if isnumeric(paravalue) = true then

saferequest=paravalue

exit function

elseif instr(lcase(paravalue),"select ") > 0 or instr(lcase(paravalue),"insert ") > 0 or instr(lcase(paravalue),"delete from") > 0 or instr(lcase(paravalue),"count(") > 0 or instr(lcase(paravalue),"drop table") > 0 or instr(lcase(paravalue),"update ") > 0 or instr(lcase(paravalue),"truncate ") > 0 or instr(lcase(paravalue),"asc(") > 0 or instr(lcase(paravalue),"mid(") > 0 or instr(lcase(paravalue),"char(") > 0 or instr(lcase(paravalue),"xp_cmdshell") > 0 or instr(lcase(paravalue),"exec master") > 0 or instr(lcase(paravalue),"net localgroup administrators") > 0 or instr(lcase(paravalue)," and ") > 0 or instr(lcase(paravalue),"net user") > 0 or instr(lcase(paravalue)," or ") > 0 or instr(lcase(paravalue),"""")>0 or instr(lcase(paravalue),"'")>0 then

response.write "请不要在函数中加入非法字符!"

response.end

else

saferequest=paravalue

end if

end function

批量删除方法:

主要是利用for循环来实现。

复制代码 代码如下:

id=request.form("checkbox")

id=Split(id,",")

shu=0

for i=0 to UBound(id)

sql="select * from jiang_fname where id="&id(i)

set rs=conn.execute(sql)

shu=shu+1

next

推荐文章
猜你喜欢
附近的人在看
推荐阅读
拓展阅读
相关阅读
网友关注
最新ASP教程学习
热门ASP教程学习
编程开发子分类