在web中，安全性主要體現(xiàn)在兩個(gè)方面：一個(gè)是程序安全性，即防止網(wǎng)頁(yè)在插入惡意代碼；另一個(gè)是數(shù)據(jù)庫(kù)安全性，這個(gè)我們可以經(jīng)常備份數(shù)據(jù)庫(kù)來(lái)實(shí)現(xiàn)。
在文中，我將演示如果在網(wǎng)頁(yè)中備份和恢復(fù)數(shù)據(jù)庫(kù)。
其實(shí)備份和恢復(fù)數(shù)據(jù)庫(kù)都是利用SQL Server提供的SQL語(yǔ)句來(lái)備份的。
備份：use master;backup database @name to http://www.360doc.com/mailto:disk=@path;
恢復(fù)：use master;restore database @name from http://www.360doc.com/mailto:disk=@path;
上面用的是參數(shù)化SQL語(yǔ)句，可以在程序執(zhí)行的時(shí)候動(dòng)態(tài)給參數(shù)賦值。
代碼：
- <%@ Page Language="C#" AutoEventWireup="true" CodeFile="DatabaseAction.aspx.cs" Inherits="DatabaseAction" %>
- <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml" >
- <head runat="server">
- <title>無(wú)標(biāo)題頁(yè)</title>
- </head>
- <body>
- <form id="form1" runat="server">
- <div>
- <table border="0" width="100%">
- <tr><td colspan="2">數(shù)據(jù)庫(kù)還原和備份</td></tr>
- <tr><td>請(qǐng)選擇數(shù)據(jù)庫(kù)</td><td>
- <asp:DropDownList ID="ddlDatabaseList" runat="server">
- </asp:DropDownList></td></tr>
- <tr><td>
- 數(shù)據(jù)庫(kù)文件名</td><td>
- <asp:TextBox ID="txtDbFileName" runat="server"></asp:TextBox></td></tr>
- <tr><td>
- 操作選項(xiàng)</td><td>
- <asp:RadioButton ID="rbBackup" runat="server" Checked="True" GroupName="action" Text="備份" />
- <asp:RadioButton ID="rbRestore" runat="server" GroupName="action" Text="還原" /></td></tr>
- <tr><td>
- 操作</td><td>
- <asp:Button ID="btnOK" runat="server" OnClick="btnOK_Click" Text="執(zhí)行" /></td></tr>
- </table>
- </div>
- </form>
- </body>
- </html>
后臺(tái)代碼：
- using System;
- using System.Data;
- using System.Configuration;
- using System.Collections;
- using System.Web;
- using System.Web.Security;
- using System.Web.UI;
- using System.Web.UI.WebControls;
- using System.Web.UI.WebControls.WebParts;
- using System.Web.UI.HtmlControls;
- using System.Data.SqlClient;
-
- public partial class DatabaseAction : System.Web.UI.Page
- {
- protected void Page_Load(object sender, EventArgs e)
- {
- if (!Page.IsPostBack)
- {
-
- SqlConnection connection = new SqlConnection("Data Source=ZHOUFOXCN;User ID=sa;Password=sa");
- SqlCommand command = new SqlCommand("sp_helpdb", connection);
- command.CommandType = CommandType.StoredProcedure;
- connection.Open();
- SqlDataReader reader = command.ExecuteReader();
- ddlDatabaseList.DataSource = reader;
- ddlDatabaseList.DataTextField = "Name";
- ddlDatabaseList.DataBind();
- reader.Close();
- connection.Close();
- }
- }
- protected void btnOK_Click(object sender, EventArgs e)
- {
- string dbFileName = txtDbFileName.Text.Trim();
- SqlConnection connection = new SqlConnection("Data Source=ZHOUFOXCN;User ID=sa;Password=sa");
- string dbName = ddlDatabaseList.SelectedValue;
- if (!dbFileName.EndsWith(".bak"))
- {
- dbFileName += ".bak";
- }
- if (rbBackup.Checked)
- {
- SqlCommand command = new SqlCommand("use master;backup database @name to disk=@path;",connection);
- connection.Open();
- string path=Server.MapPath("~//App_Data")+"http://"+dbFileName;
- command.Parameters.AddWithValue("@name", dbName);
- command.Parameters.AddWithValue("@path", path);
- command.ExecuteNonQuery();
- connection.Close();
- }
- else
- {
- SqlCommand command = new SqlCommand("use master;restore database @name from disk=@path;", connection);
- connection.Open();
- string path = Server.MapPath("~//App_Data") + "http://" + dbFileName;
- command.Parameters.AddWithValue("@name", dbName);
- command.Parameters.AddWithValue("@path", path);
- command.ExecuteNonQuery();
- connection.Close();
- }
- }
- }
以上代碼在WindowsXP+VisualStudio2005+SQL Server2000下測(cè)試通過(guò)
