Data Source 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 8-1 Data Source 8-2 Data Source 8-3 Data Source 8-4 Data Source 8-5 DataSourceID 8-6 DataSourceMode 8-7 DataSource 8-8 8-9 Parameter Direction 8-10 Data Source 8-11 Data Source 8-12 Data Source 8-13 Data Source 8-14 SqlDataSource 8-15 SqlDataSource Stored Procedure 8-16 ObjectDataSource 8-17 8-18 ADO.NET
ASP.NET 3.5 I VB GridView Data Source GridView GridView Data Source Data Source GridView Data Source Data Source Code 8-1 Data Source Data Source ADO.NET ADO.NET DBA Data Source ADO.NET 8-2 Data Source Data Source ADO.NET ADO.NET ADO.NET 3.5 Data Source 8-2
Data Source 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 1. ADO.NET SQL Server ADO.NET SQL Server 2. ADO.NET Dispose() DataSet DataTable 3. ASP.NET 1.x DataBinding DataGrid 4. XML 5. DataGrid ADO.NET ADO.NET Data Source Data Source 1. ADO.NET SQL Server Select Insert Update Delete 2. ADO.NET Data Source 3. GridView Data Source 8-3
ASP.NET 3.5 I VB XML Data Source 5. DataGrid Data Source DataGrid GridView Data Source 6. Data Source 7. ADO.NET 8. 9. Data Source ADO.NET ADO.NET SQL Server SqlDataSource ADO.NET.NET 4. ADO.NET 4.0 LINQ Entity Framework Data Services Data Source 8-4
Data Source 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 8-3 Data Source ASP.NET 3.5 Tabular 8-1 Data Source SqlDataSource AccessDataSource ObjectDataSource XmlDataSource SiteMapDataSource LinqDataSource EntityDataSource Microsoft SQL Server OLE DB ODBC Oracle SQL Server DataSet Microsoft Access DataSet Web XML ASP.NET TreeView Menu XPath XSLT XmlDataSource XML ASP.NET SiteMap ASP.NET Language-Integrated Query (LINQ) Entity Data Model (EDM) ADO.NET ADO.NET DataSource 8-5
ASP.NET 3.5 I VB LinqDataSource EntityDataSource ASP.NET 3.5 II- 8-4 Data Source ASP.NET 3.5 SqlDataSource Access- DataSource ObjectDataSource XmlDataSource SiteMapDataSource ASP.NET 3.5 SQL Server SqlDataSource XML XmlDataSource Data Source ASP.NET 1.0 DataSourceID ASP.NET 3.5 DataSourceID DataSource Data Source Data Source.NET.NET ADO.NET XML 8-6
Data Source 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 6-1 8-1 ASP.NET 3.5 Oracle ASP.NET 3.5 OracleDataSource SqlDataSource SqlDataSource SQL Server 2000 2005 2008 Data Provider SQL Server.NET Framework Data Provider for SQL Server Access.NET Framework Data Provider for OLE DB ODBC.NET Framework Data Provider for ODBC Oracle.NET Framework Data Provider for Oracle 7.3 8i 9i SqlDataSource 8-7
ASP.NET 3.5 I VB 8-1 ASP.NET 3.5 8-5 DataSourceID GridView DataSourceID DataSourceID DataSource ID DataSource 8-8
Data Source 16 17 2. DataSource DataSourceID DataSourceID GridView AdRotator GridView BulletedList DataList CheckBoxList DetailsView DropDownList FormView ListBox Repeater RadioButtonList TreeView DataGrid Menu ASP.NET 3.5 1. DataSourceID 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 SqlDataSource DataBind() Exception 8-6 DataSourceMode SqlDataSource AccessDataSource DataSourceMode ADO.NET DataSet DataReader 8-9
ASP.NET 3.5 I VB 8-2 DataSourceMode DataSet DataReader DataSet GridView IDataReader Select Insert Update Delete 8-1 DataReader DataGrid GridView DataSet DataReader IEnumerable DataSet DataReader DataSet DataReader DataReader.aspx 01 Imports System.Data.SqlClient 02 03 Partial Class DataReader 04 Inherits System.Web.UI.Page 05 06 Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load 07 If (Not IsPostBack) Then 08 ' Builder 09 Dim csbuilder As New SqlConnectionStringBuilder() 10 csbuilder.datasource = "." 11 csbuilder.initialcatalog = "Northwind" 12 csbuilder.userid = "sa" 13 csbuilder.password = "test" 14 ' 15 Dim conn As New SqlConnection() 16 conn.connectionstring = csbuilder.connectionstring 17 conn.open() 18 8-10
Data Source 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 19 Dim cmd As New SqlCommand("select EmployeeID,FirstName,City from employees", conn) 20 Dim dr As SqlDataReader = cmd.executereader() 21 22 GridView1.DataSource = dr 23 GridView1.DataBind() 24 dr.close() 25 26 dr = cmd.executereader() 27 DataGrid1.DataSource = dr 28 DataGrid1.DataBind() 29 30 cmd.dispose() 31 dr.close() 32 dr.dispose() 33 conn.close() 34 conn.dispose() 35 End If 36 End Sub 37 End Class SqlConnectionStringBuilder.NET 3.5 IntelliSense SqlConnection 8-11
ASP.NET 3.5 I VB GridView DataGrid 8-2 DataReader 8-7 DataSource ASP.NET 3.5 Parameter SQL Statement Parameter SQL Injection SQL Injection 1. 2. SQL Statement SQL SQL SQL Drop database 8-12
Data Source 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 sa Parameter Parameter Injected Code SQL Parameter 8-3 DataSource ASP.NET ControlParameter TextBox.Text DropDownList SelectedItem CookieParameter Cookie FormParameter HTML ProfileParameter Profile QueryStringField QueryString QueryStringParameter SessionParameter Session DefaultValue 3. 8-13
ASP.NET 3.5 I VB SQL Injection SessionParameter CookieParameter QueryStringParameter SQL ASP.NET 3.5 Parameter VS 2008 SqlDataSource SelectQuery Coding 8-14 8-3