如何通过单击按钮显示gridview？ [英] How to display gridview by clicking button?

问题描述

protected void Button1_Click(object sender, EventArgs e)
       {
           SqlConnection con = new SqlConnection("Data Source=xenorix8-PC;Initial Catalog=sachi;Persist Security Info=True;User ID=sa;Password=123");
           SqlCommand cmd = new SqlCommand("select * from tablename where convert(varchar(25),columnname,126) like '%" + TextBox1.Text + "%'", con);
           SqlDataAdapter da = new SqlDataAdapter(cmd);
           DataTable dt = new DataTable();
           da.Fill(dt);

           GridView1.DataSource = dt;
           GridView1.DataBind();
       }

我尝试过：



我使用上面的代码，因为sql查询是正确的，但gridview没有显示我错了什么？请告诉我。

，

da.Fill（dt）;

GridView1.DataSource = dt;

GridView1.DataBind（）;

这两行是正确还是错误？

What I have tried:

i'am using above code ,in that sql query is correct, but gridview was not displayed what i'am wrong? please tell me.
in that,
da.Fill(dt);
GridView1.DataSource = dt;
GridView1.DataBind();
these two lines are correct or wrong?

推荐答案

set AutoGenerateColumns = 真实





添加了Richard的评论：

关于SQL注入的所有想法（但是不敢问）|特洛伊亨特 [ ^ ]

如何在没有技术术语的情况下解释SQL注入？ |信息安全堆栈交换 [ ^ ]

查询参数化备忘单| OWASP [ ^ ]



不要忽视该漏洞。这很容易被利用，即使是三岁的孩子也可以做到这一点 [ ^ ]。

set AutoGenerateColumns="true"


Added Richard's Comment:
Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]

Don't ignore that vulnerability. It's so easy to exploit, even a three year old can do it[^].

这篇关于如何通过单击按钮显示gridview？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！