2017-05-30 89 views
0

我有一个Web表单项目来更新Microsoft SQL 2012数据库表中的列。当我为我的SqlConnection“硬编码”连接信息时,一切正常。但是,如果我尝试去ConfigurationManager.ConnectionStrings路线,我得到不支持的关键字“ID”。我已将Imports.System.Configuration代码包含到我的项目中。下面是我在哪里通过添加的ConnectionString到我的web.config像这样ASP.NET(VB)从web.config尝试设置数据库连接

<connectionStrings > 
<add 
    name="PRRWeb" 
    connectionString="Server=server;Database=DB;Timeout=200;User ID=user; Password=Password; Trusted_Connection=False;" 
    providerName="System.Data.SqlClient"/> 

运行到解决这一问题的问题

Protected Sub BtnSubmit_Click(sender As Object, e As EventArgs) Handles BtnSubmit.Click 
    Dim myConn As SqlConnection 
    Dim cmd As SqlCommand 
    Dim sqlstring, RqType, RqLast, RqFirst, RqOrg, RqEmail, RqNeedDate, SubFirst, SubLast, RqDetails, RqGenDate, RqOperator As String 
    RqType = cbxRequestType.SelectedValue 
    RqLast = txtReqLastName.Text 
    RqFirst = txtReqFirstname.Text 
    RqOrg = txtOrganization.Text 
    RqEmail = txtEmail.Text 
    RqNeedDate = txtReqDate.Text 
    SubFirst = txtSubFirst.Text 
    SubLast = txtSubLast.Text 
    RqDetails = txtReqDetails.Text 
    RqGenDate = txtGenDate.Text 
    RqOperator = txtOperator.Text 
    If Agree.Checked = False Then 
     MsgBox("You must agree to the terms before proceeding") 
    Else 
     myConn = New SqlConnection(ConfigurationManager.ConnectionStrings("PRRWeb").ConnectionString) 
     myConn.Open() 
      sqlstring = "INSERT INTO Requests (LastName, FirstName, Organization, DateRequested, DateNeeded, OperatorID, SubjectLastName, SubjectFirstName, Notes, TypeID, Email) VALUES ('" + RqLast + "','" + RqFirst + "', '" + RqOrg + "','" + RqGenDate + "', '" + RqNeedDate + "','" + RqOperator + "','" + SubLast + "','" + SubFirst + "','" + RqDetails + "','" + RqType + "','" + RqEmail + "')" 
      cmd = New SqlCommand(sqlstring, myConn) 
      cmd.ExecuteNonQuery() 
     myConn.Close() 
     MsgBox("Your request has been submitted.", MsgBoxStyle.Information) 
     Response.Redirect(Request.RawUrl) 
    End If 
+1

错误来自哪条线? – mason

+1

向我们展示web.config条目,这可能是责任。 – Mike

+1

这段代码是世界上每一个渴望黑客的人的喜悦。你有没有听说过Sql Injection? – Steve

回答

0

分,然后加入这个我VB代码

myConn = New SqlConnection(ConfigurationManager.ConnectionStrings ("PRRWeb").ConnectionString)