简单页面控件赋值

/// <summary>
    /// 赋值 表名，控件名，要查询的唯一数据
    /// </summary>
    protected void SetEvaluate(string TableName, string UpName, string Id)
    {
        ContentPlaceHolder cph = (ContentPlaceHolder)Page.Master.FindControl("cph_context");
        UpdatePanel up = (UpdatePanel)cph.FindControl(UpName);
        DataTable dt = LOaPersonLogic.GetPersonTemp("select * from " + TableName + " where ID='" + Id + "'");
        for (int i = 0; i < dt.Columns.Count; i++)
        {
            //集合表头名称 dt.Columns[i]
            //集合值dt.Rows[0][i].ToString()
            foreach (Control ctl in up.Controls[0].Controls)
            {
                if ((ctl is TextBox) && ctl.ID.Trim() == dt.Columns[i].ToString().Trim())
                {
                    ((TextBox)ctl).Text = dt.Rows[0][i].ToString();
                }
                if ((ctl is DropDownList) && ctl.ID.Trim() == dt.Columns[i].ToString().Trim())
                {
                    ((DropDownList)ctl).Items.FindByValue(dt.Rows[0][i].ToString().Trim()).Selected = true;
                }
            }
        }
    }

    /// <summary>
    ///  生成sql 修改sql
    /// </summary>
    /// <param name="TableName">表名称</param>
    /// <param name="WyId">唯一id主键</param>
    /// <param name="UpName"></param>
    /// <param name="Id">修改id</param>
    protected string CreateSql(string TableName, string WyId, string UpName, string Id)
    {
        string SQL = "update " + TableName + " set ";
        ContentPlaceHolder cph = (ContentPlaceHolder)Page.Master.FindControl("cph_context");
        UpdatePanel up = (UpdatePanel)cph.FindControl(UpName);
        foreach (Control ctl in up.Controls[0].Controls)
        {
            if (ctl is TextBox)
            {
                SQL = SQL + ctl.ID + "='" + ((TextBox)ctl).Text + "',";
            }
            if (ctl is DropDownList)
            {
                SQL = SQL + ctl.ID + "='" + ((DropDownList)ctl).SelectedItem.Value.Trim() + "',";
            }
        }
        if (SQL.IndexOf(',') > -1)
        {
            SQL = SQL.Substring(0, SQL.Length - 1) + " where " + WyId + "='" + Id + "'";
        }
        return SQL;
    }