|
|
@ -320,6 +320,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
// string sql = MsOp_YAXIANGDAL.gethea;
|
|
|
|
// string sql = MsOp_YAXIANGDAL.gethea;
|
|
|
|
//}
|
|
|
|
//}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult GetDataList(int start, int limit, string condition, string sort="")
|
|
|
|
public ContentResult GetDataList(int start, int limit, string condition, string sort="")
|
|
|
|
{
|
|
|
|
{
|
|
|
|
var dataList = MsOp_YAXIANGDAL.GetDataList(condition,Session["USERID"].ToString(), sort);
|
|
|
|
var dataList = MsOp_YAXIANGDAL.GetDataList(condition,Session["USERID"].ToString(), sort);
|
|
|
@ -352,6 +353,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
return new ContentResult() { Content = json };
|
|
|
|
return new ContentResult() { Content = json };
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult GetData(string handle, string condition)
|
|
|
|
public ContentResult GetData(string handle, string condition)
|
|
|
|
{
|
|
|
|
{
|
|
|
|
var data = MsOp_YAXIANGDAL.GetData(condition, Session["USERID"].ToString());
|
|
|
|
var data = MsOp_YAXIANGDAL.GetData(condition, Session["USERID"].ToString());
|
|
|
@ -390,6 +392,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
return new ContentResult() { Content = json };
|
|
|
|
return new ContentResult() { Content = json };
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult GetBodyList( string condition )
|
|
|
|
public ContentResult GetBodyList( string condition )
|
|
|
|
{
|
|
|
|
{
|
|
|
|
var dataList = MsOp_YAXIANGDAL.GetBodyList(condition);
|
|
|
|
var dataList = MsOp_YAXIANGDAL.GetBodyList(condition);
|
|
|
@ -417,6 +420,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
#endregion
|
|
|
|
#endregion
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult Save(string opstatus, string data, string Body, string DelBody)//
|
|
|
|
public ContentResult Save(string opstatus, string data, string Body, string DelBody)//
|
|
|
|
{
|
|
|
|
{
|
|
|
|
|
|
|
|
|
|
|
@ -516,7 +520,8 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
var strSql = " update MsOp_YAXIANG set SPENDMONEY= ";
|
|
|
|
var strSql = " update MsOp_YAXIANG set SPENDMONEY= ";
|
|
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult Delete(string data)
|
|
|
|
public ContentResult Delete(string data)
|
|
|
|
{
|
|
|
|
{
|
|
|
|
Database db = DatabaseFactory.CreateDatabase();
|
|
|
|
Database db = DatabaseFactory.CreateDatabase();
|
|
|
@ -548,6 +553,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult DelDetail(string data,string GID)
|
|
|
|
public ContentResult DelDetail(string data,string GID)
|
|
|
|
{
|
|
|
|
{
|
|
|
|
Database db = DatabaseFactory.CreateDatabase();
|
|
|
|
Database db = DatabaseFactory.CreateDatabase();
|
|
|
@ -592,6 +598,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
|
|
|
|
|
|
|
|
#region 状态变更
|
|
|
|
#region 状态变更
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult PushState(string data,string Execution) {
|
|
|
|
public ContentResult PushState(string data,string Execution) {
|
|
|
|
|
|
|
|
|
|
|
|
Database db = DatabaseFactory.CreateDatabase();
|
|
|
|
Database db = DatabaseFactory.CreateDatabase();
|
|
|
@ -604,6 +611,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
private ContentResult doPushState(YXmb head, string Execution)
|
|
|
|
private ContentResult doPushState(YXmb head, string Execution)
|
|
|
|
{
|
|
|
|
{
|
|
|
|
var modb = new ModelObjectRepository();
|
|
|
|
var modb = new ModelObjectRepository();
|
|
|
@ -631,6 +639,7 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
return new ContentResult() { Content = JsonConvert.Serialize(result) };
|
|
|
|
return new ContentResult() { Content = JsonConvert.Serialize(result) };
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult PushState_List(string dataList, string Execution)
|
|
|
|
public ContentResult PushState_List(string dataList, string Execution)
|
|
|
|
{
|
|
|
|
{
|
|
|
|
|
|
|
|
|
|
|
@ -983,6 +992,8 @@ namespace DSWeb.MvcShipping.Controllers
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
//驳回提交
|
|
|
|
//驳回提交
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
|
|
|
|
public ContentResult AuditBack(string dataList,string reason)
|
|
|
|
public ContentResult AuditBack(string dataList,string reason)
|
|
|
|
{
|
|
|
|
{
|
|
|
|
|
|
|
|
|
|
|
|