C# 如何存储数据库中的特定值并保存到cookie中
使用C# 如何存储数据库中的特定值并保存到cookie中,c#,asp.net,ado.net,C#,Asp.net,Ado.net,使用SqlCommand.ExecuteScalar从数据库中获取单个值,并将其添加到Response.Cookies SqlCommand cmd = new SqlCommand("select folderlocation from fsfilestorage where id='"+sessionid+"'", con); SqlDataReader reader1 = cmd.ExecuteReader(); read
SqlCommand.ExecuteScalar
从数据库中获取单个值,并将其添加到Response.Cookies
SqlCommand cmd = new SqlCommand("select folderlocation from fsfilestorage
where id='"+sessionid+"'", con);
SqlDataReader reader1 = cmd.ExecuteReader();
reader1.Read();
string folder = string.Empty;
folder = reader1.GetString(0);
-您不应该将SQL语句连接在一起,而应该使用参数化查询来避免SQL注入
var folder=cmd.ExecuteScalar().ToString();
HttpCookie myCookie = new HttpCookie("folder");
myCookie["FolderPath"] = folder;
myCookie.Expires = DateTime.Now.AddDays(1d);
Response.Cookies.Add(myCookie);