我的更新語句中的語法錯誤

Question

我不能看到我的代碼出錯了，我嘗試了幾次改變它，並無法獲得更改，如果我可以得到一些幫助，我將不勝感激。

private void btnUpdatePersonalDetails_Click(object sender, EventArgs e) 
    { 
     if (rndMale.Checked == true) 
     { 
      Gender = "Male"; 
     } 
     else 
     { 
      if (rndFemale.Checked == true) 
      { 
       Gender = "Female"; 
      } 
     } 
     string mySqlCode = 
      "UPDATE tblPersonalDetails Set [First Name]='" + txtFirstName.Text 
      + "',[Last Name] = '" + txtLastName.Text 
      + "',Age = '" + txtAge.Text 
      + "',Height(cm) = '" + txtHeight.Text 
      + "',[Average Resting Heart Rate] = '" + txtAverageRestingHeartRate.Text 
      + "',[Contact Number] = '" + txtContactNumber.Text 
      + "',newAddress = '" + txtAddress.Text 
      + "',Gender = '" + Gender 
      + "' WHERE Username= '"+GlobalUsername.username+"'"; 
     insertDatabase(mySqlCode); 

    } 

Answer 1

使用[Height(cm)]而不是Height(cm)。

Answer 2

讓我們先從一些基礎知識：

• 不要使用列名這樣也表名。這是不好的做法。

• 使用SqlParameter您SqlCommand防止SQL注入

• 使用不同類BusinesLayer，DataAccessLayer

這裏是如何看的代碼aspx頁面：

private void btnUpdatePersonalDetails_Click(object sender, EventArgs e) 
{ 
     if (rndMale.Checked == true) 
     { 
      gender = "Male"; 
     } 
     else 
     { 
      if (rndFemale.Checked == true) 
      { 
       gender = "Female"; 
      } 
     } 

     PersonalDetails personDetails = new PersonalDetails(); 

     personalDetails.UpdateDetails(txtFirstName.Text, txtLastName.Text, txtAge.Text, txtHeight.Text,txtAverageRestingHeartRate.Text, txtContactNumber.Text, txtAddress.Text, gender, GlobalUserName.username); 
} 

這裏是Business對象類 - >這裏我會使用重命名的列。您應該在數據庫中重命名您的列。

public void UpdateDetails(string firstName, string lastName, string age, string height, string avgHeartRate, string contactNumber, string address, string gender, string userName) 
{ 
    SqlCommand cmd = new SqlCommand(@" 
UPDATE 
    PersonalDetails 
SET 
    FirstName = @FirstName, 
    LastName = @LastName, 
    Age = @Age, 
    Height = @Height, 
    AvgHeartRate = @AvgHeartRate, 
    ContactNumber = @ContactNumber 
    Address = @Address, 
    Gender = @Gender 
WHERE 
    UserName = @UserName 
"); 

    cmd.Parameters.AddWithValue("@FirstName", firstName); 
    cmd.Parameters.AddWithValue("@LastName", lastName); 
    cmd.Parameters.AddWithValue("@Age", age); 
    cmd.Parameters.AddWithValue("@Height", height); 
    cmd.Parameters.AddWithValue("@AvgHeartRate", avgHeartRate); 
    cmd.Parameters.AddWithValue("@ContactNumber", contactNumber); 
    cmd.Parameters.AddWithValue("@Address", address); 
    cmd.Parameters.AddWithValue("@Gender", gender); 
    cmd.Parameters.AddWithValue("@UserName", userName); 

    SqlManager.ExecuteNonQuery(cmd); 
} 

這裏是SqlManager類兩種方法：

public static int ExecuteNonQuery(SqlCommand cmd) 
    { 
     SqlConnection conn = GetSqlConnection(cmd); 

     try 
     { 
      return cmd.ExecuteNonQuery(); 
     } 
     catch 
     { 
      throw; 
     } 
     finally 
     { 
      conn.Close(); 
     } 
    } 

    public static SqlConnection GetSqlConnection(SqlCommand cmd) 
    { 
     if (cmd.Connection == null) 
     { 
      SqlConnection conn = new SqlConnection(ConnectionString); 

      conn.Open(); 

      cmd.Connection = conn; 

      return conn; 
     } 

     return cmd.Connection; 
    } 

如果你寫列名正確，這將更新您的個人資料沒有問題。我在這個問題中編寫了基本的數據訪問層：checking user name or user email already exists。你可以檢查它，如果你想。