数据库登录注册创建角色

public bool CanRegister(string id) throw Exception{//为了抛出异常，所以直接引用throw Exception  if(!IsSafe(id))  {     throw new Exception("对不起，请输入合法的字符");     //return false;节省了这一步  }}//用try catch 来捕获异常，如果捕获到了异常就说明出错了

using System;using MySql.Data;using MySql.Data.MySqlClient;using System.Data;using System.Text.RegularExpressions;using System.Runtime.Serialization;using System.Runtime.Serialization.Formatters.Binary;using System.IO;public class DataMgr{    MySqlConnection sqlConn;    //单例模式    public static DataMgr instance;    public DataMgr()    {        instance = this;        Connect();    }    //连接    public void Connect()    {        //数据库        string connStr = "Database=game;Data Source=127.0.0.1;";        connStr += "User Id=root;Password=123456;port=3306";//拼接字符串        sqlConn = new MySqlConnection(connStr);        try        {            sqlConn.Open();        }        catch (Exception e)        {            Console.Write("[DataMgr]Connect " + e.Message);            return;        }    }    //判定安全字符串    public bool IsSafeStr(string str)    {        return !Regex.IsMatch(str, @"[-|;|,|\/|\(|\)|\[|\]|\}|\{|%|@|\*|!|\']");    }    //是否存在该用户    private bool CanRegister(string id)    {        //防sql注入        if (!IsSafeStr(id))            return false;        //查询id是否存在        string cmdStr = string.Format("select * from user where id='{0}';", id);          MySqlCommand cmd = new MySqlCommand (cmdStr, sqlConn);          try         {            MySqlDataReader dataReader = cmd.ExecuteReader ();             bool hasRows = dataReader.HasRows;            dataReader.Close();            return !hasRows;        }        catch(Exception e)        {            Console.WriteLine("[DataMgr]CanRegister fail " + e.Message);            return false;        }    }    //注册    public bool Register(string id, string pw)    {        //防sql注入        if (!IsSafeStr (id) || !IsSafeStr (pw))         {            Console.WriteLine("[DataMgr]Register 使用非法字符");            return false;        }        //能否注册        if (!CanRegister(id))         {            Console.WriteLine("[DataMgr]Register !CanRegister");            return false;        }        //写入数据库User表        string cmdStr = string.Format("insert into user set id ='{0}' ,pw ='{1}';", id, pw);        MySqlCommand cmd = new MySqlCommand(cmdStr, sqlConn);        try        {            cmd.ExecuteNonQuery();            return true;        }        catch(Exception e)        {            Console.WriteLine("[DataMgr]Register " + e.Message);            return false;        }    }    //创建角色    public bool CreatePlayer(string id)    {        //防sql注入        if (!IsSafeStr(id))            return false;        //序列化        IFormatter formatter = new BinaryFormatter ();        MemoryStream stream = new MemoryStream ();        PlayerData playerData = new PlayerData ();        try         {            formatter.Serialize(stream, playerData);        }         catch(Exception e)         {            Console.WriteLine("[DataMgr]CreatePlayer 序列化 " + e.Message);            return false;        }        byte[] byteArr = stream.ToArray();        //写入数据库        string cmdStr = string.Format ("insert into player set id ='{0}' ,data =@data;",id);        MySqlCommand cmd = new MySqlCommand (cmdStr, sqlConn);        //cmd的参数是一个字典，键是参数名，@data，值是byte数组        cmd.Parameters.Add ("@data", MySqlDbType.Blob);        cmd.Parameters[0].Value = byteArr;        try         {            cmd.ExecuteNonQuery ();            return true;        }         catch (Exception e)        {            Console.WriteLine("[DataMgr]CreatePlayer 写入 " + e.Message);            return false;        }    }    //检测用户名密码    public bool CheckPassWord(string id, string pw)    {        //防sql注入        if (!IsSafeStr (id)||!IsSafeStr (pw))            return false;        //查询        string cmdStr = string.Format("select * from user where id='{0}' and pw='{1}';", id, pw);          MySqlCommand cmd = new MySqlCommand (cmdStr, sqlConn);          try         {            MySqlDataReader dataReader = cmd.ExecuteReader();            bool hasRows = dataReader.HasRows;            dataReader.Close();            return hasRows;        }        catch(Exception e)        {            Console.WriteLine("[DataMgr]CheckPassWord " + e.Message);            return false;        }    }    //获取玩家数据    public PlayerData GetPlayerData(string id)    {        PlayerData playerData = null;        //防sql注入        if (!IsSafeStr(id))            return playerData;        //查询        string cmdStr = string.Format("select * from player where id ='{0}';", id);        MySqlCommand cmd = new MySqlCommand (cmdStr, sqlConn);         byte[] buffer;        try        {            MySqlDataReader dataReader = cmd.ExecuteReader();             if(!dataReader.HasRows)            {                dataReader.Close();                return playerData;            }            dataReader.Read();            long len = dataReader.GetBytes(1, 0, null, 0, 0);//1是data              buffer = new byte[len];              dataReader.GetBytes(1, 0, buffer, 0, (int)len);            dataReader.Close();        }        catch(Exception e)        {            Console.WriteLine("[DataMgr]GetPlayerData 查询 " + e.Message);            return playerData;        }        //反序列化        MemoryStream stream = new MemoryStream(buffer);         try         {            BinaryFormatter formatter = new BinaryFormatter();            playerData = (PlayerData)formatter.Deserialize(stream);            return playerData;        }        catch (SerializationException e)         {            Console.WriteLine("[DataMgr]GetPlayerData 反序列化 " + e.Message);            return playerData;        }    }    //保存角色    public bool SavePlayer(Player player)    {        string id = player.id;        PlayerData playerData = player.data;        //序列化        IFormatter formatter = new BinaryFormatter ();        MemoryStream stream = new MemoryStream ();        try         {            formatter.Serialize(stream, playerData);        }         catch(Exception e)         {            Console.WriteLine("[DataMgr]SavePlayer 序列化 " + e.Message);            return false;        }        byte[] byteArr = stream.ToArray();        //写入数据库        string formatStr = "update player set data =@data where id = '{0}';";            string cmdStr = string.Format (formatStr , player.id);        MySqlCommand cmd = new MySqlCommand (cmdStr, sqlConn);        cmd.Parameters.Add ("@data", MySqlDbType.Blob);        cmd.Parameters[0].Value = byteArr;        try         {            cmd.ExecuteNonQuery ();            return true;        }         catch (Exception e)        {            Console.WriteLine("[DataMgr]CreatePlayer 写入 " + e.Message);            return false;        }    }}