SQL数据库验证字符串

Question

我正在为一个在线表单项目工作，我似乎无法找到如何从SQL数据库获取值并根据字符串验证它，在数据库= A和TextBox.text Q1 = A

下面是到目前为止我的代码，但似乎无法工作，在这个有些变量是全球性的，

Dim Question As String = "Q" & count 
Dim textVal As String = TextBox.Text 
Dim conn As SqlClient.SqlConnection = New SqlClient.SqlConnection 
Dim dbSource As String = "Data Source=(LocalDB)\v11.0;AttachDbFilename=C:\Users\ben.miles\documents\visual studio 2012\Projects\WebTraningQuestions\WebTraningQuestions\App_Data\Usertest.mdf" 
Dim ds As New DataSet 
Dim sql As String = "SELECT FROM SAP" 
Dim da As SqlClient.SqlDataAdapter = New SqlClient.SqlDataAdapter(sql, conn) 
conn.ConnectionString = dbSource 
Dim SqSearch As String = "%" & textVal & "%" 
Dim sqlQ1 As String = sql & " WHERE Questions LIKE SqSearch" 
Dim cmd1 As New SqlCommand(sqlQ1, conn) 
conn.Open() 

'This is where I cant get my code right but if you see below. I would like it something like this. 

If TextBox.Text = (database) Then 
    Label.Text = "Correct" 
    Label.ForeColor = Drawing.Color.Green 
Else 
    Label.Text = "Wrong" 
    Label.ForeColor = Drawing.Color.Red 
End If 

Answer 1

您可以使用DataReader检索价值，像（空气代码，因为我没有任何VB它已经有一段时间）：

Dim Question As String = "Q" & count 
Dim textVal As String = TextBox.Text 
Dim conn As SqlClient.SqlConnection = New SqlClient.SqlConnection 
Dim dbSource As String = "Data Source=(LocalDB)\v11.0;AttachDbFilename=C:\Users\ben.miles\documents\visual studio 2012\Projects\WebTraningQuestions\WebTraningQuestions\App_Data\Usertest.mdf" 
Dim ds As New DataSet 
Dim sql As String = "SELECT [fields..] FROM SAP" 
Dim da As SqlClient.SqlDataAdapter = New SqlClient.SqlDataAdapter(sql, conn) 
conn.ConnectionString = dbSource 
Dim SqSearch As String = "%" & textVal & "%" 
Dim sqlQ1 As String = sql & " WHERE Questions LIKE SqSearch" 
Dim cmd1 As New SqlCommand(sqlQ1, conn) 
conn.Open() 

Dim myReader AS SqlDataReader = cmd1.ExecuteReader() 

If myReader.HasRows Then 
    myReader.Read() 
    If TextBox.Text = (myReader.GetString(col_of_field)) Then 
     Label.Text = "Correct" 
     Label.ForeColor = Drawing.Color.Green 
    Else 
     Label.Text = "Wrong" 
     Label.ForeColor = Drawing.Color.Red 
    End If 
End If 

myReader.Close() 

我会根据你正在寻找这个问题的具体ID删除LIKE，而是查询。这意味着可能将问题ID存储在表单上。我也会参数化查询，而不是将其构建为字符串;否则您将面临潜在的SQL注入攻击。