使用 HttpWebRequests 获取 Json 数据

Question

如何使用 C# 使用 HttpRequest 发送 Json

我有这个代码，但它可以工作，并返回这样的结果

"[{\"Fullname\":\"John Snow\",\"Telephone\":\"08147720192\",\"gender\":\"Male\",\"email\":\"john.snow@gmail.com\",\"date_ofbirth\":\"1985-06-22T00:00:00\",\"nationalID\":\"JS834788US\",\"accountnumber\":\"0034773291\",\"salary\":800000.00}]"

我宁愿希望它在没有 [] 的情况下返回

所以它应该是这样的：

string json = "{\"Fullname\":\"John Snow\",\"Telephone\":\"08147720192\",\"gender\":\"Male\",\"email\":\"john.snow@gmail.com\",\"date_ofbirth\":\"1985-06-22T00:00:00\",\"nationalID\":\"JS834788US\",\"accountnumber\":\"0034773291\",\"salary\":800000.00}";

所以很容易阅读，C#源代码长这样：

      public static Object GETRESTInfo(string restUrl, string reqMethod)
        {
            var request = (HttpWebRequest)WebRequest.Create(restUrl);
            var response = (HttpWebResponse)request.GetResponse();

            var responseString = new StreamReader(response.GetResponseStream()).ReadToEnd();
            return responseString;
}

在这里需要帮助，我对 HttpWebRequests 很陌生

已更新。 这是我提出请求的代码

using EmployeeRESTAPI.Models;
using System;
using System.Collections.Generic;
using System.Data;
using System.Data.SqlClient;
using System.Linq;
using System.Net;
using System.Net.Http;
using System.Web.Http;

namespace EmployeeRESTAPI.Controllers
{
    public class EmployeeDBController : ApiController
    {
        string MyconnectionString = "Data Source=DLX;Initial Catalog=EmployeeDB;Integrated Security=True";
        // GET api/<controller>
        public IEnumerable<EmployeeDB> Get()
        {
            SqlConnection con = new SqlConnection(MyconnectionString);
            DataTable dt = new DataTable();
            con.Open();

            string query = "select* from [EmployeeDB].[dbo].[EmployeeTable]";
            SqlDataAdapter adapter = new SqlDataAdapter(query, con);
            adapter.Fill(dt);

            List<EmployeeDB> empdb = new List<Models.EmployeeDB>(dt.Rows.Count);
            if (dt.Rows.Count > 0)
            {
                foreach (DataRow empdbrecord in dt.Rows)
                {
                    empdb.Add(new ReadEmployee(empdbrecord));
                }
            }
            return empdb;
        }

        // GET api/<controller>/5
        public IEnumerable<EmployeeDB> Get(string accountnumber)
        {
            SqlConnection con = new SqlConnection(MyconnectionString);
            DataTable dt = new DataTable();
            con.Open();

            string query = "select * from [EmployeeDB].[dbo].[EmployeeTable] where accountnumber = '" + accountnumber + "'";
            SqlDataAdapter adapter = new SqlDataAdapter(query, con);
            adapter.Fill(dt);

            List<EmployeeDB> empdb = new List<Models.EmployeeDB>(dt.Rows.Count);
            if (dt.Rows.Count > 0)
            {
                foreach (DataRow empdbrecord in dt.Rows)
                {
                    empdb.Add(new ReadEmployee(empdbrecord));
                }
            }
            return empdb;
        }

        // POST api/<controller>
        public void Post([FromBody]string value)
        {
        }

        // PUT api/<controller>/5
        public void Put(int id, [FromBody]string value)
        {
        }

        // DELETE api/<controller>/5
        public void Delete(int id)
        {
        }
    }
}

Answer 1

您必须返回单个员工而不是 IEnumerable：

public EmployeeDB Get(string accountnumber)
    {
        SqlConnection con = new SqlConnection(MyconnectionString);
        DataTable dt = new DataTable();
        con.Open();

        string query = "select * from [EmployeeDB].[dbo].[EmployeeTable] where accountnumber = '" + accountnumber + "'";
        SqlDataAdapter adapter = new SqlDataAdapter(query, con);
        adapter.Fill(dt);

        if (dt.Rows.Count > 0)
        {
            return new ReadEmployee(dt.Rows[0]);
        }

        throw new Exception("Account not found"); 
    }

正如@Mike Cheel 所说，您的查询可能会被 SQL 注入利用，通过在您的 SQL 查询中使用参数来修复它