我想开发一个android应用程序可以通过Web服务访问存储在sql server数据库中的值。我的Web服务返回空响应(如anyType {})if它有争论。不带参数的Web方法的工作原理fine.This是我的Web服务Asp.Net Web服务返回空响应,如果它有参数
[WebMethod]
public List<string> getDetails(string dist)
{
details = new List<string>();
string sel = "select h_Name,h_address,h_contact from hospital_tb where h_district='" + dist + "'";
SqlDataReader dr = db.dataRead(sel);
while (dr.Read())
{
string name = dr["h_name"].ToString();
string adres = dr["h_address"].ToString();
string contact = dr["h_contact"].ToString();
result = name + ":" + adres + ":" + contact;
details.Add(result);
}
return details;
}
Web服务命名空间是:http://hospitalsearch.com/hos
这是我的Android代码
class Async extends AsyncTask<String, String, String>
{
@Override
protected String doInBackground(String... params) {
// TODO Auto-generated method stub
request=new SoapObject(NAMESPACE, METHOD);
property=new PropertyInfo();
property.setName("district");
property.setValue(dis);
Log.d("condition", dis);
request.addProperty(property);
SoapSerializationEnvelope envelope=new SoapSerializationEnvelope(SoapEnvelope.VER11);
envelope.dotNet=true;
envelope.bodyOut=request;
Log.d("ree", request.toString());
HttpTransportSE transport=new HttpTransportSE(ADDRESS);
try {
transport.call(ACTION, envelope);
//SoapPrimitive response=(SoapPrimitive)envelope.getResponse();
response=(SoapObject)envelope.getResponse();
Log.d("response", response.toString());
if(response!=null)
{
parseData(response);
}
else
{
Log.d("result", "no data");
}
} catch (IOException e) {
// TODO Auto-generated catch block
res="error";
Log.d("result", res);
e.printStackTrace();
} catch (XmlPullParserException e) {
// TODO Auto-generated catch block
res="error1";
Log.d("result", res);
e.printStackTrace();
}
return res;
}
@Override
protected void onPostExecute(String result) {
// TODO Auto-generated method stub
ll.setAdapter(adapter);
}
public void parseData(SoapObject result)
{
for(int i=0;i<result.getPropertyCount();i++)
{
if(result.getProperty(i) instanceof SoapObject)
{
parseData((SoapObject)result.getProperty(i));
}
else
{
PropertyInfo p=new PropertyInfo();
result.getPropertyInfo(i, p);
String name= result.getProperty(i).toString();
Log.d("data", name);
String[] re=name.split(":");
Model model=new Model();
model.setName(re[0]);
model.setAddress(re[1]);
model.setContact(re[2]);
al.add(model);
}
}
}
}
在这里,我发现,网络服务不接受参数,我从我的Android代码传递。我也记录我的请求:Log.d(“request”,request.toString());它显示getDetails {区= AAAA}。
谨防SQL禁令http://stackoverflow.com/questions/332365/how-does-the-sql-injection-from-the-bobby-的tables-xkcd-comic-work –