SQL语句创建参数

创建参数：SqlCon.Parameters.Add(new SqlParameter(“@ID”,SqlDbType.SmallInt,2));

设置参数值：SqlCon.Parameters[“@ID”].Value=job_id.Text;

通过命令对角插入数据

String insertCmd=”insert into jobs(job_id,job_desc) Values(@ID,@DESC)”

SqlCommand SqlCmd=new SqlCommand(insertCmd,SqlCon);

 

 

 

 

 

 

 

public static bool insertOperate(person p)

        {

              try

              {

                   SqlConnection con=personOperate.createCon();

                   con.Open();

                   SqlCommand cmd=new SqlCommand("insert into person values(@pID,@pName,@pSex)",con);

                   SqlParameter para=new SqlParameter("@pID",SqlDbType.VarChar,10);

                   para.Value=p.pID;                cmd.Parameters.Add(para);                

                   para=new SqlParameter("@pName",SqlDbType.VarChar,20);

                   para.Value=p.pName;              cmd.Parameters.Add(para);             

                   para=new SqlParameter("@pSex",SqlDbType.VarChar,2);

                   para.Value=p.pSex;　             cmd.Parameters.Add(para);

                   cmd.ExecuteNonQuery();

                   return true;

              }

              catch(Exception e)

              {             return false;          }                 

         }