如何在下面的方法

Question

我只是跑Visual Studio的代碼分析中使用參數，他們告訴我使用參數化查詢以下行的代碼：

using(var DA = new SQLiteDataAdapter(SQL, connectionstring)) 

完整的方法：

public static DataTable SelectAll(string SQL) 
     { 
      //create a string(connectionstring), filled with the connectionstring 
      string connectionstring = "Data Source=" + LogicDatabase.Databasename + ";Version=3;Password=" + Settings.SQLiteDatabasePassword + ";"; 
      //create a new DataSet 
      DataSet DS = new DataSet(); 
      //Give name to a SQLiteDataAdapter 

      //Create a new SQLiteDataAdapter and fill it with the sql query, and path of the Database. 
      using(var DA = new SQLiteDataAdapter(SQL, connectionstring)) 
      { 
       //Clear the dataset, so we are sure it is empty, before storing items in it. 
       DS.Clear(); 
       //fill the dataset from the SQLiteDataAdapter. 
       DA.Fill(DS); 
       //Fill the DataTable with the first table of the DataSet 
       DataTable DT = DS.Tables[0]; 
       //return the DataTable 
       return DT; 
      }     
     } 

如何在此代碼中實現參數？

Answer 1

使用SQLiteCommand，並與您的SQL語句填充它。它有一個屬性Parameters，你可以填寫SQLiteParameter的實例。之後，您可以使用此命令來創建您的SQLiteDataAdapter。