如何解決此異常「Syntext error into INSERT INTO statement」.p

Question

private void save_Click(object sender, EventArgs e) 
{ 
    ACCOUNT.oo.Open(); 
    string QRY = "insert into size(SIZENO,SIZE,COVERAGE,WEIGHT) 
     values('" + size_id.Text + "','" +txt_size.Text + "','" +txt_coverage.Text 
     + "','" +txt_weight.Text + "')"; 
    OleDbCommand ODB = new OleDbCommand(QRY,ACCOUNT.oo); 
    ODB.ExecuteNonQuery(); 
    MessageBox.Show("Inserted Sucessfully.."); 
    ACCOUNT.oo.Close(); 
} 

Answer 1

它看起來像您的數據庫列是用於數字數據，並且您插入的值被引用。刪除單引號可以解決這個問題。

你也應該參數化查詢，例如：

private void save_Click(object sender, EventArgs e) 
{ 
    ACCOUNT.oo.Open(); 
    string QRY = "insert into size(SIZENO,SIZE,COVERAGE,WEIGHT) values(?,?,?,?)"; 
    using(OleDbCommand ODB = new OleDbCommand(QRY, ACCOUNT.oo)) 
    { 
     // change the OleDbType based on your actual data types 
     ODB.Parameters.Add("SIZENO", OleDbType.Integer).Value = int.Parse(size_id.Text); 
     ODB.Parameters.Add("SIZE", OleDbType.Integer).Value = int.Parse(txt_size.Text); 
     ODB.Parameters.Add("COVERAGE", OleDbType.Integer).Value = int.Parse(txt_coverage.Text); 
     ODB.Parameters.Add("WEIGHT", OleDbType.Integer).Value = int.Parse(txt_weight.Text); 
     ODB.ExecuteNonQuery(); 
    } 
    MessageBox.Show("Inserted Sucessfully.."); 
    ACCOUNT.oo.Close(); 
}