WooYun.org

public class SaveHandler : IHttpHandler {
    public void ProcessRequest(HttpContext context)
    {
        context.Response.ContentType = "text/plain";
        string mysnum = context.Request.QueryString["Mysnum"].ToString();//获取参数
        string myspd = context.Request.QueryString["Myspd"].ToString();
        string rstr = "0";
        bool isok = saveSpeed(mysnum, myspd); //跟入方法saveSpeed
        if (isok)
        {
            rstr = "1";
        }
        context.Response.Write(rstr);
    }
 
    public bool IsReusable {
        get {
            return false;
        }
    }
    private bool saveSpeed(string Pnum, string Pspd)
    {
        Pfinger pbll = new Pfinger();
        return pbll.saveSpd(Pnum, Pspd);//跟入方法saveSpd
    }
}
public class Pfinger
{
    private readonly Pfinger_dal dal = new Pfinger_dal();
    public bool saveSpd(string psnum, string myspd)
    {
        return this.dal.saveSpd(psnum, myspd);//跟入方法dal.saveSpd
    }
}
public class Pfinger_dal
{
    
    public bool saveSpd(string psnum, string myspd)
    {
        bool flag = false;
        if ((psnum.Trim() != "") && (myspd.Trim() != ""))
        {
            DateTime now = DateTime.Now;
            int year = now.Year;
            int month = now.Month;
            decimal pspd = decimal.Parse(myspd);
            string s = this.ExistsPsnum(psnum); //跟入方法ExistsPsnum
            if (s != "")
            {
                return this.UpdatePspd(int.Parse(s), pspd, now);
            }
            Pfinger_model model = new Pfinger_model();
            
                model.Psnum = psnum;
                model.Pspd = new decimal?(pspd);
                model.Pyear = new int?(year);
                model.Pmonth = new int?(month);
                model.Pdate = new DateTime?(now);
                model.Pdegree = 0;
            
            //model.Pgrade = new LearnSite.BLL.Students().GetSgrade(psnum);
            //model.Pterm = int.Parse(XmlHelp.GetTerm());
            if (this.Add(model) > 0)
            {
                flag = true;
            }
        }
        return flag;
    }
    public string ExistsPsnum(string Psnum) //最终到这，拼接SQL语句，参数未处理
    {
        return DbHelperSQL.FindString("select top 1 Pid from Pfinger where Psnum='" + Psnum + "'", new SqlParameter[0]);
    }
}