我有这样的代码:将数据插入SQL数据库使用ASP.NET/VB.NET
Dim myConn As SqlConnection
Dim cmd As SqlCommand
Dim sqlstring, DNAME, DEXP, DCREATION, DLASTUPDATE, DCOMMENTS As String
DNAME = TextBox1.Text
DEXP = TextBox2.Text
DCREATION = TextBox3.Text
DLASTUPDATE = TextBox4.Text
DCOMMENTS = TextBox5.Text
myConn = New SqlConnection("Integrated Security=SSPI;Data Source=.;Initial Catalog=DOMAIN_NAME;User ID=sa;Password=***********")
myConn.Open()
sqlstring = " INSERT INTO ROLAND (D_NAME, D_EXPIRATION, D_CREATION, D_LASTUPDATE,D_COMMENTS) VALUES ('" + DNAME + "','" + DEXP + "','" + DCREATION + "','" + DLASTUPDATE + "','" + DCOMMENTS + "')"
cmd = New SqlCommand(sqlstring, myConn)
cmd.ExecuteNonQuery()
myConn.Close()
Response.Redirect(Request.RawUrl, True)
当我执行,它给了我这个错误:
Cannot open database "DOMAIN_NAME" requested by the login. The login failed.
Login failed for user 'comm-pc10\pcuser10.comm'.
,并突出的myconn .Open()
这里有什么问题,有什么帮助吗?我有SQLServer 2008和一个用户名和通行证我的数据库
无需喊。 –
我建议你弄清楚如何在VB中做参数化查询。像你一样连接插入语句会让你为SQL注入开放。 http://littlebobbytables.com/ –
更糟的是,他使用SA帐户 – okrumnow