简介 – ASP.NET MVC 4 系列

       整理好 Edit.aspx 试图后，应该考虑要为用户的输入增加验证。从数据模型可以获得部分支持。如果用户给某个数值类型的字段输入了字符串，他会看到一个错误页面，可能是默认的 ASP.NET 栈信息或者自定义错误页面（如果在控制器和应用程序中启用了自定义错误处理）。 绝大部分用户都不能够通过栈追踪信息知道自123134你好

using System;

using System.Collections.Generic;

using System.Data;

using System.Data.Entity;

using System.Linq;

using System.Net;

using System.Web;

using System.Web.Mvc;

using MvcMovie.Models;

namespace MvcMovie.Controllers

{

    public class MoviesController : Controller

    {

        private MovieDBContext db = new MovieDBContext();

        // GET: /Movies/

        public ActionResult Index(string searchString)

        {

            var movies = db.Movies.Where(m => true);

            if (!String.IsNullOrEmpty(searchString))

            {

                movies = movies.Where(s => s.Title.Contains(searchString));

            }

            return View(movies);

        }

        // GET: /Movies/Details/5

        public ActionResult Details(int? id)

        {

            if (id == null)

            {

                return new HttpStatusCodeResult(HttpStatusCode.BadRequest);

            }

            Movie movie = db.Movies.Find(id);

            if (movie == null)

            {

                return HttpNotFound();

            }

            return View(movie);

        }

        // GET: /Movies/Create

        public ActionResult Create()

        {

            return View();

        }

        // POST: /Movies/Create

        // 为了防止“过多发布”攻击，请启用要绑定到的特定属性，有关 

        // 详细信息，请参阅 http://go.microsoft.com/fwlink/?LinkId=317598。

        [HttpPost]

        [ValidateAntiForgeryToken]

        public ActionResult Create([Bind(Include = "ID,Title,ReleaseDate,Genre,Price")] Movie movie)

        {

            if (ModelState.IsValid)

            {

                db.Movies.Add(movie);

                db.SaveChanges();

                return RedirectToAction("Index");

            }

            return View(movie);

        }

        // GET: /Movies/Edit/5

        public ActionResult Edit(int? id)

        {

            if (id == null)

            {

                return new HttpStatusCodeResult(HttpStatusCode.BadRequest);

            }

            Movie movie = db.Movies.Find(id);

            if (movie == null)

            {

                return HttpNotFound();

            }

            return View(movie);

        }

        // POST: /Movies/Edit/5

        // 为了防止“过多发布”攻击，请启用要绑定到的特定属性，有关 

        // 详细信息，请参阅 http://go.microsoft.com/fwlink/?LinkId=317598。

        [HttpPost]

        [ValidateAntiForgeryToken]

        public ActionResult Edit([Bind(Include = "ID,Title,ReleaseDate,Genre,Price")] Movie movie)

        {

            if (ModelState.IsValid)

            {

                db.Entry(movie).State = EntityState.Modified;

                db.SaveChanges();

                return RedirectToAction("Index");

            }

            return View(movie);

        }

        // GET: /Movies/Delete/5

        public ActionResult Delete(int? id)

        {

            if (id == null)

            {

                return new HttpStatusCodeResult(HttpStatusCode.BadRequest);

            }

            Movie movie = db.Movies.Find(id);

            if (movie == null)

            {

                return HttpNotFound();

            }

            return View(movie);

        }

        // POST: /Movies/Delete/5

        [HttpPost, ActionName("Delete")]

        [ValidateAntiForgeryToken]

        public ActionResult DeleteConfirmed(int id)

        {

            Movie movie = db.Movies.Find(id);

            db.Movies.Remove(movie);

            db.SaveChanges();

            return RedirectToAction("Index");

        }

        protected override void Dispose(bool disposing)

        {

            if (disposing)

            {

                db.Dispose();

            }

            base.Dispose(disposing);

        }

    }

}