using System;

 using System.Collections.Generic;

 using System.Linq;

 using System.Text;

 using System.Threading.Tasks;

 using System.Data;

 using System.Data.SqlClient;

 namespace ConsoleApplication13

 {

     class Program

     {

         static string strConn = @"server=Joe-PC;database=AccountDBforSQLInjection;uid=sa;pwd=root";

         static SqlConnection conn = new SqlConnection(strConn);

         static string sql1 = "INSERT INTO Account(AccountID,AccountName,password) VALUES"

             + "(100,'sql1','123456')";//此命令正确

         static string sql2 = "INSERT INTO Account(AccountID,AccountName1,password) VALUES"

             + "(100,'sql2','123456')";//此命令因有拼写错误将会失败

         static SqlCommand cmd1 = new SqlCommand(sql1, conn);

         static SqlCommand cmd2 = new SqlCommand(sql2, conn);

         static void Main(string[] args)

         {

             //OperationWithoutTransaction();

             OperationWithTransaction();

         }

         static void OperationWithoutTransaction()

         {

             conn.Open();

             try

             {

                 cmd1.ExecuteNonQuery();

                 cmd2.ExecuteNonQuery();

             }

             catch (Exception e)

             {

                 Console.WriteLine("执行失败。");

                 Console.WriteLine(e);

             }

             finally

             {

                 conn.Close();

             }

         }

         static void OperationWithTransaction()

         {

             conn.Open();

             //连接打开后，才能启动事务

             SqlTransaction trans = conn.BeginTransaction();

             //将两个操作添加到同一个事务中

             cmd1.Transaction = trans;

             cmd2.Transaction = trans;

             try

             {

                 cmd1.ExecuteNonQuery();

                 cmd2.ExecuteNonQuery();

                 //如果没有出现异常，则提交事务

                 trans.Commit();

             }

             catch (Exception e)

             {

                 Console.WriteLine("执行失败，事务回滚。");

                 Console.WriteLine(e);

                 //执行回滚

                 trans.Rollback();

             }

             finally

             {

                 conn.Close();

             }

         }

     }

 }