INSERT INTO語句中的語法錯誤visual basic

Question

我不知道這是否已被回答，但我在插入語句時出現語法錯誤。 繼承人我的代碼，我使用的Visual Basic 2010和MS Access 2010作爲我的數據庫

Imports System.Data.OleDb 
Imports Comprehensive.Form1 
Public Class Form2 
Dim cnn As New OleDb.OleDbConnection 
Private Sub RefreshData() 
    If Not cnn.State = ConnectionState.Open Then 
     cnn.Open() 
    End If 
    Dim da As New OleDb.OleDbDataAdapter("SELECT * FROM items ORDER BY ID", cnn) 
    Dim dt As New DataTable 
    da.Fill(dt) 
    Form1.DataGridView1.DataSource = dt 
    cnn.Close() 
End Sub 
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click 
    Dim cmd As New OleDbCommand 
    Try 
     If Not cnn.State = ConnectionState.Open Then 
      cnn.Open() 
     End If 


     cmd.Connection = cnn 
     cmd.CommandText = "INSERT INTO Items (Item_Name, Item_Type, Date_Added)" + "'VALUES('" & TextBox1.Text & "','" & TextBox2.Text & "','" & TextBox3.Text & "');'" 
     cmd.ExecuteNonQuery() 
     RefreshData() 
    Catch ex As Exception 
     MessageBox.Show(ex.Message & " - " & ex.Source) 
     cnn.Close() 
    End Try 



End Sub 

Private Sub Form2_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load 
    'TODO: This line of code loads data into the 'ShitdataDataSet.Items' table. You can move, or remove it, as needed. 
    Me.ItemsTableAdapter.Fill(Me.ShitdataDataSet.Items) 
    cnn = New OleDb.OleDbConnection 
    cnn.ConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=shitdata.mdb;" 
End Sub 

Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click 
    Me.Close() 
End Sub 

末級

Answer 1

的INSERT行包含VALUES關鍵字前和結束不需要單引號sql語句，刪除它們

(Item_Name, Item_Type, Date_Added) VALUES(....) 
            ^^^   ^^^ 

但像往常一樣，你不用這樣寫sql命令。
應始終使用參數化查詢（SQL Injections）

cmd.Connection = cnn 
    cmd.CommandText = "INSERT INTO Items (Item_Name, Item_Type, Date_Added)" & _ 
         "VALUES(?, ?, ?)" 
    cmd.Parameters.AddWithValue("@p1", TextBox1.Text) 
    cmd.Parameters.AddWithValue("@p2", TextBox2.Text) 
    cmd.Parameters.AddWithValue("@p3", TextBox3.Text) 
    cmd.ExecuteNonQuery() 

而且，作爲最後一個音符，請記住，如果你在你的表有一個日期時間（因爲它應該）爲DATE_ADDED領域，那麼你需要將textbox3值轉換爲日期時間。

如果是這種情況，那麼我建議查看this question，其中在訪問數據庫中插入日期時間值的問題已得到解決。