using System;

 using System.Collections.Generic;

 using System.Linq;

 using System.Web;

 using System.Web.UI;

 using System.Web.UI.WebControls;

 using System.Data;

 using System.Data.SqlClient;

 using System.Configuration;

 namespace UI

 {

     public partial class _Default : System.Web.UI.Page

     {

         protected void Page_Load(object sender, EventArgs e)

         {

             //判断是否第一次加载Bind()类

             if (!IsPostBack)

             {

                 Bind();

             }

         }

         /// <summary>创建返回数据库连接的公共类

         /// </summary>

         /// <returns>返回连接数据库的类</returns>

         public SqlConnection GetConnection()

         {

                 string str_conn = ConfigurationManager.AppSettings["myConStr"].ToString();

                 SqlConnection myConn = new SqlConnection(str_conn);

                 return myConn;

         }

         /// <summary>将查询的数据绑定到GridView控件中

         /// </summary>

         public void Bind()

         {

             try

             {

                 SqlConnection myConn = GetConnection();

                 myConn.Open();

                 string sql_Str = "select * from stuInfo order by stuAge desc";

                 SqlDataAdapter myda = new SqlDataAdapter(sql_Str, myConn);

                 DataSet myDs = new DataSet();

                 myda.Fill(myDs);

                 GridView1.DataSource = myDs;

                 //为GridView控件设置主键，此处必须有否则会产生如下代码中的溢出错误

                 /*

                  * Index was out of range. Must be non-negative and less than the size of the collection.

                   Parameter name: index

                  */
 GridView1.DataKeyNames = new string[] { "stuNo" };//GridView控件设置主键，此处最为关键，稍不留意就忘掉了，切记呀

                 GridView1.DataBind();

                 myDs.Dispose();

                 myda.Dispose();

                 myConn.Close();

             }

             catch (Exception ex)

             {

                 Response.Write(ex.Message);

             }

         }

         /// <summary>创建GridView控件的RowEditing事件类

         /// </summary>

         /// <param name="sender"></param>

         /// <param name="e"></param>

         protected void GridView1_RowEditing(object sender, GridViewEditEventArgs e)

         {

             GridView1.EditIndex = e.NewEditIndex;

             this.Bind();

         }

         /// <summary>创建GridView控件的RowUpdating事件类

         /// </summary>

         /// <param name="sender"></param>

         /// <param name="e"></param>

         protected void GridView1_RowUpdating(object sender, GridViewUpdateEventArgs e)

         {

             try

             {

                 //获取在GridView控件里相关事件的键值

                 int stuNum = Convert.ToInt32(GridView1.DataKeys[e.RowIndex].Value.ToString());

                 string newName = ((TextBox)(GridView1.Rows[e.RowIndex].Cells[].Controls[])).Text.ToString();

                 SqlConnection myConn = GetConnection();

                 myConn.Open();

                 /*

                  * string sql_str = "update stuInfo set stuName='" + newName + "' where stuNo='" + stuNum + "'";

                  *与上句相比，以下使用带参数的SQL语句在一定程度上可防止SQL注入攻击

                 */

                 string sql_str = "update stuInfo set stuName=@newName where stuNo=@stuNum";

                 SqlCommand myCmd = new SqlCommand(sql_str, myConn);

                 myCmd.Parameters.Add("@newName", SqlDbType.NVarChar).Value = newName;

                 myCmd.Parameters.Add("@stuNum", SqlDbType.VarChar).Value = stuNum;

                 if (myCmd.ExecuteNonQuery() > )

                 {

                     Response.Write("<script type='text/javascript'>alert('更新成功');</script>");

                 }

                 else

                 {

                     Response.Write("<script type='text/javascript'>alert('更新失败');</script>");

                 }

                 //调试用

                 textbox1.Text = "学号：" + stuNum + " , 姓名：" + newName + ", " + sql_str + ", ExecuteNonQuery状态：" + myCmd.ExecuteNonQuery();

                 myCmd.Dispose();

                 myConn.Close();

                 GridView1.EditIndex = -;

                 this.Bind();

             }

             catch (Exception ex)

             {

                 Response.Write(ex.Message);

             }

         }

         /// <summary>创建GridView控件的RowCancelingEdit事件类

         /// </summary>

         /// <param name="sender"></param>

         /// <param name="e"></param>

         protected void GridView1_RowsCancelingEdit(object sender, GridViewCancelEditEventArgs e)

         {

             GridView1.EditIndex = -;

             this.Bind();

         }
135　　　}
136　}