如何獲取記錄從日期到日期的SQL Server

Question

我要解釋它的圖片和源代碼

前設計

後端代碼

private void AddRecord(object sender, RoutedEventArgs e) 
    { 
     string date = datee.Text + " " + DateTime.Now.ToLongTimeString(); 
     if (datee.Text == "" || cusname.SelectedValue == null || Vanda.SelectedValue == null || price.SelectedValue == null || bags.Text == "") 
     { 
      MessageBox.Show("please fill the data"); 
     } 
     else 
     { 

      DataRowView dt = (DataRowView)Vanda.SelectedItem; 
      string vda = dt["vanda"].ToString(); 
      DataRowView dt2 = (DataRowView)price.SelectedItem; 
      string data2 = dt2["price"].ToString(); 
      decimal dta = Convert.ToDecimal(data2); 
      Int32 pricee = Convert.ToInt32(dta); 
      decimal bag = Convert.ToDecimal(bags.Text); 
      decimal credit = pricee * bag; 
      DataRowView cus = (DataRowView)cusname.SelectedItem; 

      string cusidd = cus["id"].ToString(); 
      int cusid = Convert.ToInt16(cusidd); 
      con.Open(); 
      SqlCommand cmd5 = new SqlCommand("SELECT price - retailprice FROM vanda where vanda = '" + vda + "' and price = '" + pricee + "'", con); 
      SqlDataReader reader = cmd5.ExecuteReader(); 
      reader.Read(); 
      string val = reader.GetValue(0).ToString(); 
      decimal valu = Convert.ToDecimal(val); 
      Int32 profit = Convert.ToInt32(valu); 
      reader.Close(); 
      SqlCommand cmd3 = new SqlCommand("insert into records (cusid,datee,description,vanda,price,bag,credit,debit,profit) values ('" + cusid + "','" + date + "','" + des.Text + "','" + vda + "','" + pricee + "','" + bags.Text + "','" + credit + "','','"+profit+"')", con); 
      cmd3.ExecuteNonQuery(); 
      MessageBox.Show("Data Inserted"); 
      con.Close(); 

     } 

    } 

DataGrid代碼

private void enddate_SelectedDateChanged(object sender, SelectionChangedEventArgs e) 
    { 
     if (startdate.Text == "") 
     { 
      MessageBox.Show("Please Select Starting Date"); 
     } 
     else 
     { 
      con.Open(); 
      SqlDataAdapter adapter = new SqlDataAdapter(" i need here Query ", con); 
      DataSet ds = new DataSet(); 
      adapter.Fill(ds); 
      data.DataContext = ds.Tables[0]; 
     } 

    } 

SQL Server數據庫

我希望你能清楚地瞭解它。現在清除錯誤並改進我的代碼/邏輯/查詢（^ _ ^）。 BLA BLA唧唧歪歪唧唧歪歪唧唧歪歪

Answer 1

首先，你的SQL應該使用命名參數，以避免SQL注入攻擊：

select r.datee,c.name,r.description,r.vanda,r.price,r.bag,r.credit,r.debit 
from records as r, 
    customer as c 
where r.cusid = c.id 
     and c.name = @cname 
     and r.datee BETWEEN @startDate AND @endDate 

當你創建這些變量，你會通過插入到您的查詢中，格式如下：

var startDate = DateTime.Parse(datee.Text).ToString("M/d/yyyy"); 
var endDate = DateTime.Now.ToString("M/d/yyyy") + " 23:59:59"; 

這會將日期值轉換爲您的數據庫預期的格式。

Answer 2

select r.datee,c.name,r.description,r.vanda,r.price,r.bag,r.credit,r.debit 
from records r 
JOIN customer c ON r.cusid = c.id 
WHERE c.name = 'aizaz' AND DateColumn BETWEEN StartDate AND EndDATE 

Answer 3

數據庫不會以任何特定的字符串格式存儲日期。日期是一個日期，它沒有特定的格式。格式化日期的輸出是一個UI的事情。

您使用SelectedDate屬性獲得DatePicker的實際DateTime值。您應該使用將這些值作爲參數傳遞給您的命令：

SqlCommand cmd = new SqlCommand("select r.datee,c.name,r.description,r.vanda,r.price,r.bag,r.credit,r.debit from records as r, customer as c where r.cusid = c.id and c.name = @cname and r.datee BETWEEN @startDate AND @endDate"); 
cmd.Parameters.AddWithValue("@startDate", datePicker1.SelectedDate.Value.Date); 
cmd.Parameters.AddWithValue("@endDate", datePicker2.SelectedDate.Value.Date.AddHours(23).AddMinutes(59).AddSeconds(59));