.net 公用的分頁查詢方法（c#）+公用的分頁查詢存儲過程（SqlServer）

1.存儲過程

    數據庫函數exec()執行sql字符串有“sql注入風險”，不推薦使用！

CREATE PROCEDURE [dbo].[p_PageList]
@Tables varchar(1000),				--表名,多表是請使用 tA a inner join tB b On a.AID = b.AID
@Sort varchar(200) = '',			--排序字段和排序方向
@PageNumber int = 1,				--開始頁碼
@PageSize int = 10,					--頁碼尺寸
@Fields varchar(1000) = '*',		--讀取字段
@Filter varchar(2000) = NULL,		--Where條件 長度不夠，從1000變為2000
@isCount bit = 0,					--是否獲得總記錄數
@TotalCounts    int = 0 output      --查詢到的總記錄數
AS
DECLARE @strFilter varchar(2000)     --長度不夠，從2000變為2000
declare @sql varchar(max)            --長度不夠，從2000變為max
Declare @strTmp nvarchar(max)        --存放取得查詢結果總數的查詢語句

-- 過濾數據
SET @strFilter = ' 1 = 1 '
IF @Filter IS NOT NULL AND @Filter != ''
BEGIN
 SET @strFilter += @Filter 
END

--獲得總記錄條數
if @isCount = 1						
begin
	set @strTmp = 'SELECT @TotalCounts= Count(1) FROM '+ @Tables + ' where ' + @strFilter
	exec sp_executesql @strTmp,N'@TotalCounts int out ',@TotalCounts out  
end

--查詢所有數據
IF @PageNumber < 1
	SET @PageNumber = 1
if @PageSize = 0
begin	
	if @Sort = ''
	begin
		set @sql = 'select ' + @Fields + ' from ' + @Tables + ' WHERE  ' + @strFilter 
	end
	else
	begin
		set @sql = 'select ' + @Fields + ' from ' + @Tables + ' WHERE  ' + @strFilter + ' ORDER BY  '+ @Sort	
	end	
end
else
begin
	if @PageNumber = 1				--第一頁提高性能
	begin 
		if @Sort = ''
		begin
			set @sql = 'select top ' + str(@PageSize) +' '+@Fields+ '  from ' + @Tables + ' WHERE ' + @strFilter
		end
		else
		begin
			set @sql = 'select top ' + str(@PageSize) +' '+@Fields+ '  from ' + @Tables + ' WHERE ' + @strFilter + ' ORDER BY  '+ @Sort
		end
	end 
	else
	begin
		DECLARE @START_ID varchar(50)
		DECLARE @END_ID varchar(50)
		SET @START_ID = convert(varchar(50),(@PageNumber - 1) * @PageSize + 1)
		SET @END_ID = convert(varchar(50),@PageNumber * @PageSize)
		if @Sort = ''
		begin
			set @sql =  ' SELECT * FROM ( ' + 
				' SELECT ROW_NUMBER() OVER(ORDER BY (SELECT 0)) AS rownum, ' + @Fields + 
				' FROM ' + @Tables + 
				' WHERE ' + @strFilter + 
			') AS D WHERE rownum BETWEEN ' + @START_ID + ' AND ' + @END_ID
		end
		else
		begin
			set @sql =  ' SELECT * FROM ( ' + 
				' SELECT ROW_NUMBER() OVER(ORDER BY ' + @Sort + ') AS rownum, ' + @Fields + 
				' FROM ' + @Tables + 
				' WHERE ' + @strFilter + 
			') AS D WHERE rownum BETWEEN ' + @START_ID + ' AND ' + @END_ID
		end
	END
END

PRINT @sql
EXEC(@sql)

GO

2.調用存儲過程的方法

    public class PageData
    {
        /// <summary>
        /// 新的分頁獲取數據
        /// </summary>
        /// <param name="tableName"></param>
        /// <param name="fieldName"></param>
        /// <param name="pageSize"></param>
        /// <param name="currentPage"></param>
        /// <param name="sortField">排序字段和排序方向,如：SortA DESC；</param>
        /// <param name="condition"></param>
        /// <param name="isCount">是否查詢總數</param>
        /// <param name="totalCount">查詢到的總記錄數</param>  
        /// <returns></returns>
        public static DataSet GetDataByPage(
            string tableName,
            string fieldName,
            int pageSize,
            int currentPage,
            string sortField,
            string condition,
            bool isCount,
            out int totalCount
            )
        {
            SqlConnection CONN = new SqlConnection("數據庫連接字符串");
            SqlDataAdapter SDA = new SqlDataAdapter("p_PageList",CONN);
            SDA.SelectCommand.CommandType = CommandType.StoredProcedure;
            SDA.SelectCommand.CommandTimeout = 30000;

            SDA.SelectCommand.Parameters.Add("@Tables", SqlDbType.VarChar,1000).Value = tableName;
            SDA.SelectCommand.Parameters.Add("@Sort", SqlDbType.VarChar,200).Value = sortField;
            SDA.SelectCommand.Parameters.Add("@PageNumber", SqlDbType.Int).Value = currentPage  ;
            SDA.SelectCommand.Parameters.Add("@PageSize", SqlDbType.Int).Value =  pageSize;
            SDA.SelectCommand.Parameters.Add("@Fields", SqlDbType.VarChar,1000).Value =   fieldName;
            SDA.SelectCommand.Parameters.Add("@Filter", SqlDbType.VarChar, 2000).Value = condition;     
            SDA.SelectCommand.Parameters.Add("@Group", SqlDbType.VarChar,1000).Value = null;
            SDA.SelectCommand.Parameters.Add("@isCount", SqlDbType.Bit).Value = isCount;
            SDA.SelectCommand.Parameters.Add("@TotalCounts", SqlDbType.Int).Direction = ParameterDirection.Output;

            DataSet ds = new DataSet();
            if (CONN.State == ConnectionState.Closed)
	        {
		         CONN.Open();
	        }
            SDA.Fill(ds);
            if (CONN.State == ConnectionState.Open)
	        {
		         CONN.Close();
	        }

            try
            {
                totalCount =int.Parse(SDA.SelectCommand.Parameters["@TotalCounts"].Value.ToString());
            }
            catch
            {
                totalCount = 0;
            }
            return ds;
        }