构造.net注入

韩小末

using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
public partial class Default2 : System.Web.UI.Page
{
   
  protected void Page_Load(object sender, EventArgs e)
    {
        SqlConnection conn = new SqlConnection();
        conn.ConnectionString = ConfigurationManager.ConnectionStrings["StudyConnectionString"].ToString();
        conn.Open();
        SqlCommand cmd = new SqlCommand("select *  from [table] where id= " + this.Page.Request.Params["getid"], conn);
        cmd.ExecuteNonQuery();
        this.Page.RegisterClientScriptBlock("script", "<script>alert('注射成功')</script>");
    }
}

构造在cs文件里

寂寞在炒作

学习啦！很有启发