problème de requête paramétrée
Bonjour à tous,
voici mon problème, je suis entraint de créer une petite application web. Mon but avec ma requête paramétrée est d'éviter les injections sql.
Mais le problème c'est que lorsque j'execute mon code il me renvoie toujours l'erreur suivante pour la ligne 69 : Compiler Error Message: BC30205: End of statement expected.
Source Error:
Line 67:
Line 68: Dim solution As String
Line 69: Dim SqlCommand cmd As new SqlCommand ("UPDATE Intervention_Helpdesk SET solution = '"@solution"' , DateIntervention = '"& DateIntervention(ipadress) &"' where nom = '" & nom & "'")
Line 70: Dim Sql As String
Line 71: Dim ipadress As String
Est-ce que quelqu'un peut-il m'aider s'il vous plait?
Bien à vous.
voici mon code si cela peut aider :
Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
|
<%@ Page Language="VB" %>
<%@ Register TagPrefix="wmx" Namespace="Microsoft.Matrix.Framework.Web.UI" Assembly="Microsoft.Matrix.Framework, Version=0.6.0.0, Culture=neutral, PublicKeyToken=6f763c9966660626" %>
<%@ import Namespace="System.Data" %>
<%@ import Namespace="System.Data.SqlClient" %>
<%@ import Namespace="System.Web.Mail" %>
<%@ import Namespace="System.IO" %>
<%@ import Namespace="System.DirectoryServices" %>
<%@ import Namespace="System.Configuration" %>
<%@ import Namespace="System.Net" %>
<%@ import Namespace="System" %>
<%@ import Namespace="System.Net.DNS" %>
<%@ import Namespace="System.ComponentModel" %>
<%@ import Namespace="System.Management" %>
<%@ import Namespace="System.Runtime.InteropServices" %>
<%@ import Namespace="System" %>
<%@ import Namespace="ActiveDs" %>
<%@ import Namespace="System.Text" %>
<%@ import Namespace="System.Net.NetworkInformation" %>
<%@ import Namespace="System.Net.Sockets" %>
<script runat="server">
' Insert page code here
'
Sub Page_Load()
Dim nom As String
nom = Request.Params("nom")
response.write("helpdesk for:"& nom)
SqlDataSourceControl1.ConnectionString="server='(local)'; trusted_connection=true; database='pspintranet'"
End Sub
Sub Button2_Click(sender As Object, e As EventArgs)
Dim nom As String
nom = Request.Params("nom")
Dim solution As String
Dim SqlCommand cmd As new SqlCommand ("UPDATE Intervention_Helpdesk SET solution = '"@solution"' , DateIntervention = '"& DateIntervention(ipadress) &"' where nom = '" & nom & "'")
Dim Sql As String
Dim ipadress As String
solution = TextBox2.Text
'Sql = "UPDATE Intervention_Helpdesk SET solution = '"& SQLQuote(solution) &"', DateIntervention = '"& DateIntervention(ipadress) &"' where nom = '" & nom & "'"
cmd.Parameters.Add("@solution",SqlDbType.VarChar);
Sql = SqlCommand
SQLExecuteQueryConnect(Sql, SqlDataSourceControl1.ConnectionString)
End Sub
Function DateIntervention(ipadress As String)
Dim co As ConnectionOptions = New ConnectionOptions()
Dim i As integer
Dim strDateIntervention as String
Dim TestConnection As Boolean
Dim nom As String
nom = Request.Params("nom")
With co
.Impersonation = System.Management.ImpersonationLevel.Impersonate
'* Use next line for XP
.Authentication = System.Management.AuthenticationLevel.Packet
'* Use next line for Win prior XP
'.Authentication = System.Management.AuthenticationLevel.Connect
End With
co.Username = "Administrator"
co.Password = "casarca632"
Dim theScope As New ManagementScope("\\" & nom & "\root\cimv2",co)
Dim theQuery As New System.Management.ObjectQuery("SELECT * From Win32_OperatingSystem ")
Dim theSearcher As New ManagementObjectSearcher(theScope, theQuery)
Try
Dim theCollectionOfResults As ManagementObjectCollection = theSearcher.Get()
For Each currentResult As ManagementObject In theCollectionOfResults
strDateIntervention = Left(currentResult("LocalDateTime").ToString(),8)
Next
Catch com_ex As System.Runtime.InteropServices.COMException When com_ex.ErrorCode = &H800706BA
'Response.write("Machines are unvailable:" & ipadress &"It may be off line or the firewallsettings are preventing the connection")
Catch ua_ex As System.UnauthorizedAccessException
' Response.write("The Remote PC refused the connection This is most likely due to a permissions issue.")
'Catch wmi_ex As Exception When wmi_ex.Exception = Management.ManagementStatus.AccessDenied
'Response.write("You do not have sufficient privileges on the remote PC:" & ipadress)
Catch ex As Exception
If IsNothing(ex.InnerException) Then
Response.write("Could not get initial data")
Else
Response.write("Could not get initial data:" & ex.InnerException.Message)
End if
End Try
return strDateIntervention
End Function
Function SQLExecuteQueryConnect(ByVal sqlQuery As String, sqlConnect as String) As String
Dim a As String
' CREER LA CONNEXION
Dim objConnect As New SqlConnection(sqlConnect)
objConnect.Open()
' CREER LA COMMANDE
Dim objCommand As New SqlCommand(sqlQuery, objConnect)
' EXECUTER LA COMMANDE
a = objCommand.ExecuteNonQuery()
Return a
End Function
Public Function SQLQuote(Chaine As String)
SQLQuote = "'" & Replace(Chaine,"'","''") & "'"
End Function
</script>
<html>
<head>
</head>
<body>
<form runat="server">
<p>
</p>
<p>
</p>
<p>
</p>
<p>
</p>
<p>
</p>
<p>
</p>
<p>
</p>
<p>
<asp:TextBox id="TextBox3" runat="server"></asp:TextBox>
<asp:Button id="Button3" runat="server" Text="Troubles"></asp:Button>
</p>
<p>
</p>
<p>
<asp:TextBox id="TextBox1" runat="server"></asp:TextBox>
<asp:Button id="Button1" runat="server" Text="Search"></asp:Button>
</p>
<p>
</p>
<p>
</p>
<p>
</p>
<p>
</p>
<p>
<asp:TextBox id="TextBox2" runat="server" Height="301px" Width="356px"></asp:TextBox>
</p>
<p>
</p>
<p>
<asp:Button id="Button2" onclick="Button2_Click" runat="server" Text="Submit"></asp:Button>
<wmx:SqlDataSourceControl id="SqlDataSourceControl1" runat="server"></wmx:SqlDataSourceControl>
</p>
<!-- Insert content here -->
</form>
</body>
</html> |
