default.aspx

<%@ Page Language="C#" AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default" %>

http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
http://www.w3.org/1999/xhtml">

   
   
   


   
       

default.aspx.cs

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Text;

public partial class _Default : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Request.QueryString["getinfo"] != null)
        {
            GetInfo();
            Response.End();
        }
        if (Request.QueryString["delete"] != null)
        {
            DeleteInfo();
            Response.End();
        }
        if (Request.QueryString["edit"] != null)
        {
            EditInfo();
            Response.End();
        }
        if (!IsPostBack)
        {
            CreateTable();

            DataTable dt = DB.GetTable("select * from test_users");
            GridView1.DataSource = dt;
            GridView1.DataBind();
        }
    }

    private void CreateTable()
    {
        string sql = "select [name] from sysobjects where objectproperty(object_id('test_users'),'istable') = 1";
        int c = DB.GetTable(sql).Rows.Count;
        if (c > 0) return;
        sql = @"create table test_users(
_id int identity(1,1) not null,
_name varchar(50) not null,
_sex varchar(4) not null,
_age int null,
_email varchar(100) null,
_address varchar(200) null)
go
insert into test_users(_name,_sex,_age,_email,_address)
select '刘备','男',32,'liubei@sanguo.com','朝阳公园' union
select '关羽','男',28,'guanyu@sanguo.com','中关村' union
select '张飞','男',27,'zhangfei@sanguo.com','八里庄西里' union
select '赵云','男',22,'zhaoyun@sanguo.com','东长安街' union
select '貂蝉','女',20,'diaochan@sanguo.com','避暑山庄'";
        DB.Execute(sql);
    }

    private void GetInfo()
    {
        int id = 0;
        if (!int.TryParse(Request.QueryString["id"], out id))
        {
            Response.Write("error");
            return;
        }
        string sql = "select * from test_users where _id=" + id.ToString();
        DataTable dt = DB.GetTable(sql);
        if (dt.Rows.Count == 0)
        {
            Response.Write("error");
            return;
        }
        DataRow row = dt.Rows[0];

        StringBuilder sb = new StringBuilder();
        sb.Append("

        Response.Write(sb.ToString());
    }

    private void DeleteInfo()
    {
        int id = 0;
        if (!int.TryParse(Request.QueryString["id"], out id))
        {
            Response.Write("error");
            return;
        }
        string sql = "delete from test_users where _id=" + id.ToString();
        DB.Execute(sql);
        Response.Write("true");
    }

    private void EditInfo()
    {
        int id = 0;
        if (!int.TryParse(Request.QueryString["id"], out id))
        {
            Response.Write("error");
            return;
        }
        string sql = "update test_users set _name='{1}',_sex='{2}',_age={3} where _id={0}";
        sql = String.Format(sql, id, Request["name"].Replace("'", ""), Request["sex"] == "男" ? "男" : "女", int.Parse(Request["age"]));
        DB.Execute(sql);
        Response.Write("true");
    }
}

DB.cs

using System;
using System.Data;
using System.Data.SqlClient;

public class DB
{
    public DB()
    {
       
    }

    public static SqlConnection SqlConn
    {
        get { return new SqlConnection("server=(local);database=tempdb;uid=sa;pwd=;"); }
    }

    public static DataTable GetTable(string sql)
    {
        using (SqlConnection conn = SqlConn)
        {
            SqlDataAdapter da = new SqlDataAdapter(sql, conn);
            DataSet ds = new DataSet();
            da.Fill(ds);
            return ds.Tables[0];
        }
    }

    public static int Execute(string sql)
    {
        using (SqlConnection conn = SqlConn)
        {
            SqlCommand cmd = new SqlCommand(sql, conn);
            return cmd.ExecuteNonQuery();
        }
    }
}