其实，大家在书写asp程序时，最担心的可能就是数据库的连接信息，会被一些人看到，进行一些破坏。下面我们用vb6.0来做一个动态链接库(.dll)来隐藏数据库的连接信息。
启动vb6.0，新建-->Active dll工程。单击"工程"-->引用,选择"microsoft active server pages object library"
和"microsoft activeX data objects 2.1 library"两项。将类模块的名称改为dcss.将工程的名称改为yygwy.保存工程文件yygwy.vbp和类文件dcss.cls。
在dcss.cls中写入:
Private myscriptingcontext As ScriptingContext
Private myapplication As Application
Private myrequest As Request
Private myresponse As Response
Private myserver As Server
Private mysession As Session
Public Sub onstartpage(passedscriptingcontext As ScriptingContext)
Set myscriptingcontext = passedscriptingcontext
Set myapplication = myscriptingcontext.Application
Set myrequest = myscriptingcontext.Request
Set myresponse = myscriptingcontext.Response
Set myserver = myscriptingcontext.Server
Set mysession = myscriptingcontext.Session
End Sub
Public Sub onendpage()
Set myscriptingcontext = Nothing
Set myapplication = Nothing
Set myrequest = Nothing
Set myresponse = Nothing
Set myserver = Nothing
Set mysession = Nothing
End Sub
'以上语句是必须的。
'定义两个公有函数
Public Function datasource() As Variant
datasource = "driver={sql server};server=yang;uid=sa;pwd=; database=dcss"
End Function
编译生成dcss.dll文件。注册regsvr32 路径\dcss.dll。
用visual interdev打开global.asa文件.当然了，你也可以在其它文件中使用。
set dcss=server.CreateObject("yygwy.dcss")
oconn=dcss.datasource()
application("strconn")=oconn
在其它的页面中如下调用即可：
set objConn = Server.CreateObject("ADODB.Connection")
objConn.Open application("strconn")
前段日子发表的文章，数据库的连接代码可以直接在ASP文件中显示出来。这次又进行了一次封装。
打开vb，新建Activex控件，工程名称为WebDb，类模块名称为GetInfomation
引用”Microsoft Activex Data Object 2.6 Library ”
Private Conn As ADODB.Connection
Private Rs As ADODB.Recordset
‘作用:判断数据库是否正确连结
'自己可以更改连接串
Public Function GetConn()
Conn.Open "Provider=SQLOLEDB.1;Persist Security Info=False;User ID=sa;Initial Catalog=Northwind;Data Source=yang"
If Err.Number <> 0 Then
GetConn = False
Else
GetConn = True
End If
End Function
‘根据输入的雇员ID,得到雇员的名称
Public Function GetEmployeeName(strEmployeeID As Integer) As String
Dim strSql As String
Set rs = New ADODB.Recordset
strSql = "select LastName+firstname from employees where EmployeeID=" & strEmployeeID
rs.Open strSql, Conn, adOpenStatic, adLockOptimistic
If rs.EOF Then
GetEmployeeName = ""
Else
GetEmployeeName = rs.Fields(0)
End If
rs.Close
End Function
‘返回所有的雇员列表
Public Function GetEmployeeList() As ADODB.Recordset
Dim strSql As String
Set rs = New ADODB.Recordset
strSql = "select EmployeeID,LastName,FirstName,Title,TitleOfCourtesy,BirthDate,HireDate,Address,City from employees"
rs.CursorLocation = adUseClient
rs.Open strSql, Conn, adOpenStatic
Set GetEmployeeList = rs
'rs.Close
End Function
我们进行测试
新建ASP页面，”TestWebDb1.asp”。主要用来测试GetEmployeeList()方法
<%
Dim strTopic
Dim strTitle
Dim strContents
Dim DataQuery
Dim Rs
Dim Myself
Myself=Request.ServerVariables("script_name")
Set DataQuery=Server.CreateObject("WebDb.GetInfomation")
Set Rs=Server.CreateObject("adodb.recordset")
%>
<%
Dim Flag
Flag=DataQuery.GetConn()
If Flag=false then
ResPonse.Write "数据库没有连结,请检查"
ResPonse.End
End if
Set Rs=DataQuery.GetEmployeeList()
if rs.eof then
Response.write "没有数据,请查询"
Response.end
end if
Rs.PageSize =3
Page= CLng(Request.QueryString ("Page"))
If Page < 1 Then Page = 1
If Page > Rs.PageCount Then Page = Rs.PageCount
Response.Write " "
Response.Write " "
Response.Write " EmployeeID | "
Response.Write " LastName | "
Response.Write " FirstName | "
Response.Write " Title | "
Response.Write " TitleOfCourtesy | "
Response.Write " BirthDate | "
Response.Write " HireDate | "
Response.Write " Address | "
Response.Write " City | "
Response.Write " "
Rs.AbsolutePage = Page
For iPage = 1 To Rs.PageSize
Response.Write " "
for i=0 to Rs.fields.count-1
Response.Write " "&Rs.fields.item(i)&" | "
next
Response.Write " "
Rs.MoveNext
If Rs.EOF Then Exit For
next
Response.Write " "
%>
<%
Rs.close
%>
新建ASP页面，”TestWebDb2.asp”。主要用来测试GetEmployeeName()方法
这个页面相对简单一些
<%
Dim DataQuery
Dim strID
Dim strResult
Set DataQuery=Server.CreateObject("WebDb.GetInfomation")
%>
<%
If Len(Request.QueryString("ID")) > 0 Then
strID = Request.QueryString("ID")
Dim Flag
Flag=DataQuery.GetConn()
If Flag=false then
ResPonse.Write "数据库没有连结,请检查"
ResPonse.End
End if
strResult=DataQuery.GetEmployeeName(cint(strID))
if strResult="" then
Response.Write "对不起,没有这个编号,请查询"
Response.End
else
ResPonse.Write strResult
end if
End If
%>
一些想法:数据库连结如果放到组件里，如果要修改数据库连结，则要重新编译组件，可能会由此引发一些问题(但是推荐这种，毕竟数据库名和服务器名不会经常改)
如果数据库连结放到ASP页面，可以通过属性传值到组件中，但是安全性会降低。
真是……
好了，这篇文章结束了,希望对大家有帮助
今后的话题便是如何实现AspToDll这个软件的功能，我们一步一步实现。
|
