编码解码(HtmlEncode与HtmlEncode)

来源：互联网发布：premiere cc mac 编辑：程序博客网时间：2024/06/11 12:46

/***********************编码研究*********************** * 1.默认情况是不允许用户在TextBox中输入html标签的, * 如果需要输入,设置Page的ValidateRequest="false" * 2.可以把输入的html标签,比如<input>直接存放在数据库中, * 只是在输出的时候编码,防止原样输出打乱页面布局.或者呈现html元素. *****************************************************/using System;using System.Data;using System.Configuration;using System.Collections;using System.Web;using System.Web.Security;using System.Web.UI;using System.Web.UI.WebControls;using System.Web.UI.WebControls.WebParts;using System.Web.UI.HtmlControls;public partial class encodingStudy : System.Web.UI.Page{ UserInfo userInfo = new UserInfo(); protected void Page_Load(object sender, EventArgs e) { if (!IsPostBack) Bind(); } private void Bind() { DataTable dt=userInfo.getUser(); //在Label里显示或直接Response.Write()都需要编码 this.lblShow.Text = htmlEncode(dt.Rows[0][0].ToString()); //在TextBox里显示就不需要编码了. //this.txtShow.Text = htmlEncode(dt.Rows[0][0].ToString()); this.txtShow.Text = dt.Rows[0][0].ToString(); } /// <summary> /// 对输入的html编码,同时对回车与空格进行转换 /// </summary> /// <param name="str"></param> /// <returns></returns> public string htmlEncode(string str) { return Server.HtmlEncode(str).Replace("/n", "<br/>").Replace(" ", " "); } protected void btnAdd_Click(object sender, EventArgs e) { //直接把数据写入数据库,注意回车在数据库中也会跳到下一行. /*在TextBox中输入内容如下: <input>空格回车 */ userInfo.addUser(this.txtEnter.Text); }} <%@ Page Language="C#" ValidateRequest="false" AutoEventWireup="true" CodeFile="encodingStudy.aspx.cs" Inherits="encodingStudy" %><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head runat="server"> <title>编码研究</title></head><body> <form id="form1" runat="server"> <div> <asp:Label ID="lblShow" runat="server" Text="Label"></asp:Label> </div> <div> <asp:TextBox ID="txtShow" runat="server" TextMode="MultiLine"></asp:TextBox> <asp:TextBox ID="txtEnter" runat="server" TextMode="MultiLine"></asp:TextBox> </div> <div> <asp:Button ID="btnAdd" runat="server" Text="Button" OnClick="btnAdd_Click" /> </div> </form></body></html>