2017-09-21 60 views

回答

0
Dim rst  As DAO.Recordset 

With CurrentDb.QueryDefs("qryPass") 
    .SQL = "select * from dbo.tblCustomers where City = '" & Me!City & "'" 
    .ReturnsRecords = True 
    Set rst = .OpenRecordset 
End With 

以上將使用名爲City的當前表單文本框。防止SQL注入,那麼你可以使用這個:

.SQL = "select * from dbo.tblCustomers where City = " & qu(me!City) 

而且你有一個通用的例程周圍放置的表達與報價:

Function qu(vText As Variant) As String 

    qu = Chr$(34) & vText & Chr$(34) 

    qu = Replace(qu, ";", "") 
    qu = Replace(qu, "(", "") 
    qu = Replace(qu, ")", "") 
    qu = Replace(qu, "=", "") 

End Function 
+0

此方法偉業。謝謝! –

相關問題