如何將圖像放入sql server 2005

Question

我已經編寫了下面的代碼將圖像路徑放入sql server 2005，但其不工作是將圖像從客戶端應用程序放入sql server的任何替代方式。

example.html的

<form id="addresslistingform" name="addresslistingform"> 
<fieldset id="fieldset1"> 
    <legend>Address for listing</legend> Zipcode:<br /> 
    <input size="30" type="text" id="zipcode" /><br /> 
    Street No:<br /> 
    <input size="30" type="text" id="addstreetno" class="number" name= 
    "streetno" /><br /> 
    Street Name:<br /> 
    <input size="30" type="text" id="addstreetname" class="required" name= 
    "streetname" /><br /> 
    Upload a couple of pictures:<br /> 
    <input size="30" type="file" id="addpicture" /><br /> 
</fieldset><input id="Addresslisting" type="image" src="images/Submit.png" align= 
"left" /> 
</form> 

example.js

$("#Addresslisting").click(function() { 
    var zipcode = ($("#addzipcode").val()); 
    var streetno = ($("#addstreetno").val()); 
    var streetname = ($("#addstreetname").val()); 
    var image = ($("#addpicture").val()); 
    var submitaddress = "{\"zipcode\":\"" + zipcode + "\",\"streetnumber\":\"" + streetno + "\",\"streetname\":\"" + streetname + "\",\"streetname\":\"" + streetname + "\",\"Imagelocation\":\"" + image + "\"}"; 
    $.ajax({ 
     type: "POST", 
     url: "/exampleproject/Afterlogin.asmx/addresslisting", 
     data: submitaddress, 
     contentType: "application/json; charset=utf-8", 
     success: ajaxSucceed, 
     dataType: "json", 
     failure: ajaxFailed 
    }); 
}); 

ASMX web服務文件

[WebMethod(EnableSession = true)] 
    [ScriptMethod(ResponseFormat = ResponseFormat.Json)] 
    public bool addresslisting(string zipcode, string streetnumber, string streetname, string Imagelocation) 
    { 
     SqlConnection con = new SqlConnection(); 
     con.ConnectionString = ""; 
     con.Open(); 

     SqlCommand sqlcom = new SqlCommand();//declaring a new command 
     sqlcom.CommandText = "insert into Address_Listing(Zip_Code,Street_Number,Street_Name,Image_Location) values ('" + zipcode + "','" + streetnumber + "','" + streetname + "', '" + Imagelocation + "')"; //query for inserting data into contact table 
     sqlcom.Connection = con;//connecting to database 

     try 
     { 
      int success = sqlcom.ExecuteNonQuery(); 
      con.Close(); 

      if (success > 0) 
      { 
       return true; 
      } 
      else 
      { 
       return false; 
      } 
     } 
     catch (Exception e) 
     { 
      con.Close(); 
      return false; 
     } 

Answer 1

我不建議在SQL服務器中存儲的圖像，你真正應該做的是在SQL服務器中存儲服務器上圖像的路徑。

此外p.campbell不是很有幫助，但非常正確。你的數據庫將被你當前擁有的代碼破解。您需要使用SQL參數來防止注入惡意SQL代碼。

http://msdn.microsoft.com/en-us/library/system.data.sqlclient.sqlparameter.aspx