Visual Studio 2012更新查詢

Question

我試圖使用這個Update命令，但它不能正常工作。當我在SQL Server 2008中運行它，但不能在Visual Studio 2012

SqlCommand cmd= new SqlCommand("UPDATE dwh_staging_table SET pestpopulation1 = @avg_pest1 WHERE DistrictName = @DistrictName and TownName = @TownName And VarietyOfCrop = @V_Crop And pestpopulation1 = @pest", con1); 
cmd.Parameters.AddWithValue("@avg_pest1",16); 
cmd.Parameters.AddWithValue("@DistrictName", "Multan"); 
cmd.Parameters.AddWithValue("@TownName","Ambala"); 
cmd.Parameters.AddWithValue("@V_Crop","NIAB 999"); 
cmd.Parameters.AddWithValue("@pest",0); 

adapter.UpdateCommand = cmd; 

Answer 1

您分配Sql Update Command到SqlDataAdapterSelectCommand這是工作。

試試這個：

adapter.UpdateCommand = new SqlCommand("your update command"); 

注：您的更新命令是開放的SQL injection attacks。
使用PARAMETERISED QUERIES來避免它們。

參數化查詢示例：

SqlCommand cmd=new SqlCommand("update products set price=@price where id=@id"); 

cmd.Parameters.AddWithValue("@price",1234); 
cmd.Parameters.AddWithValue("@id",12); 

adapter.UpdateCommand=cmd; 

完整的解決方案：（使用參數化查詢）

SqlCommand cmd = new SqlCommand("UPDATE dwh_staging_table SET pestpopulation1=@pestpopulation1 WHERE DistrictName=@DistrictName and TownName=@TownName And VarietyOfCrop=@VarietyOfCrop And pestpopulation1=@pestpopulation11", con1); 

cmd.Parameters.AddWithValue("@pestpopulation1", row[3]); 
cmd.Parameters.AddWithValue("@DistrictName", row[0].ToString()); 
cmd.Parameters.AddWithValue("@TownName", row[1].ToString()); 
cmd.Parameters.AddWithValue("@VarietyOfCrop", row[2].ToString()); 
cmd.Parameters.AddWithValue("@pestpopulation11", 0); 

adapter.UpdateCommand = cmd;