Visual Studio 2012更新查询

Question

我试图使用这个Update命令，但它不能正常工作。当我在SQL Server 2008中运行它，但不能在Visual Studio 2012

SqlCommand cmd= new SqlCommand("UPDATE dwh_staging_table SET pestpopulation1 = @avg_pest1 WHERE DistrictName = @DistrictName and TownName = @TownName And VarietyOfCrop = @V_Crop And pestpopulation1 = @pest", con1); 
cmd.Parameters.AddWithValue("@avg_pest1",16); 
cmd.Parameters.AddWithValue("@DistrictName", "Multan"); 
cmd.Parameters.AddWithValue("@TownName","Ambala"); 
cmd.Parameters.AddWithValue("@V_Crop","NIAB 999"); 
cmd.Parameters.AddWithValue("@pest",0); 

adapter.UpdateCommand = cmd; 

Answer 1

您分配Sql Update Command到SqlDataAdapterSelectCommand这是工作。

试试这个：

adapter.UpdateCommand = new SqlCommand("your update command"); 

注：您的更新命令是开放的SQL injection attacks。
使用PARAMETERISED QUERIES来避免它们。

参数化查询示例：

SqlCommand cmd=new SqlCommand("update products set price=@price where id=@id"); 

cmd.Parameters.AddWithValue("@price",1234); 
cmd.Parameters.AddWithValue("@id",12); 

adapter.UpdateCommand=cmd; 

完整的解决方案：（使用参数化查询）

SqlCommand cmd = new SqlCommand("UPDATE dwh_staging_table SET pestpopulation1=@pestpopulation1 WHERE DistrictName=@DistrictName and TownName=@TownName And VarietyOfCrop=@VarietyOfCrop And pestpopulation1=@pestpopulation11", con1); 

cmd.Parameters.AddWithValue("@pestpopulation1", row[3]); 
cmd.Parameters.AddWithValue("@DistrictName", row[0].ToString()); 
cmd.Parameters.AddWithValue("@TownName", row[1].ToString()); 
cmd.Parameters.AddWithValue("@VarietyOfCrop", row[2].ToString()); 
cmd.Parameters.AddWithValue("@pestpopulation11", 0); 

adapter.UpdateCommand = cmd;