using CustomerPortalV2.Common.Model; using Microsoft.Data.SqlClient; using System.Data; namespace CustomerPortalV2.Repository.ConnHelper { public class ConnectionHelper : IConnectionHelper { private SqlConnection _connection; public ConnectionHelper() { Init(); } public void Init() { _connection = new SqlConnection(GetConnectionString()); } public void OpenConnection() { if (_connection.State == ConnectionState.Open) _connection.Close(); _connection.Open(); } public void CloseConnection() { if (_connection.State == ConnectionState.Open) this._connection.Close(); } public string GetConnectionString() { return Common.Helper.Utilities.ReadAppSettings("ConnectionStrings:Dev"); } public String FilterString(string strVal) { var str = FilterQuote(strVal); if (str.ToLower() != "null") str = "'" + str + "'"; return str; } public string GetSingleResult(string sql) { try { var ds = ExecuteDataset(sql); if (ds == null || ds.Tables.Count == 0 || ds.Tables[0].Rows.Count == 0) return ""; return ds.Tables[0].Rows[0][0].ToString(); } catch (Exception ex) { throw ex; } finally { CloseConnection(); } } public String FilterQuote(string strVal) { if (string.IsNullOrEmpty(strVal)) { strVal = ""; } var str = strVal.Trim(); if (!string.IsNullOrEmpty(str)) { str = str.Replace(";", ""); //str = str.Replace(",", ""); str = str.Replace("--", ""); str = str.Replace("'", ""); str = str.Replace("/*", ""); str = str.Replace("*/", ""); str = str.Replace(" select ", ""); str = str.Replace(" insert ", ""); str = str.Replace(" update ", ""); str = str.Replace(" delete ", ""); str = str.Replace(" drop ", ""); str = str.Replace(" truncate ", ""); str = str.Replace(" create ", ""); str = str.Replace(" begin ", ""); str = str.Replace(" end ", ""); str = str.Replace(" char(", ""); str = str.Replace(" exec ", ""); str = str.Replace(" xp_cmd ", ""); str = str.Replace(" 2) response.Id = Convert.ToString(dt.Rows[0][2]); if (dt.Columns.Count > 3) response.Extra = Convert.ToString(dt.Rows[0][3]); return response; } } }