数据查询--参数化查询

----------------------------------配置文件------------------------------------------------------------------------------

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
    <startup>
        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.5" />
    </startup>
  <connectionStrings>
    <add name="sql" connectionString="server=.;database=MySecondDB;uid=sa;pwd=520;"/>
  </connectionStrings>
</configuration>

---------------------------------Program.cs---------------------------------------------------------------------------

using System;
using System.Collections.Generic;
using System.Configuration;
using System.Data.SqlClient;
using System.Linq;
using System.Text;
using System.Threading.Tasks;

namespace _10数据查询
{
    class Program
    {
        static void Main(string[] args)
        {
            // select * from MySecondDB..Student where stuId < @stuId

            // 1 准备sql语句
            string sql = "select * from MySecondDB..Student where stuId < @stuId";

            // 2 准备连接字符串
            string connStr = ConfigurationManager.ConnectionStrings["sql"].ConnectionString;

            // 3 参数
            SqlParameter pStuId = new SqlParameter("@stuId", (object)5);  // 保证调用的一定是object

            // 4 创建连接对象
            using (SqlConnection conn = new SqlConnection(connStr))
            {
                // 5 创建执行对象
                using (SqlCommand cmd = new SqlCommand(sql, conn))
                {
                    // 6 添加参数
                    cmd.Parameters.Add(pStuId);

                    // 7 打开
                    conn.Open();

                    // 8 执行
                    SqlDataReader reader = cmd.ExecuteReader();
                    using (reader)
                    {
                        // 每一行
                        while (reader.Read())
                        {
                            // 每一个单元格
                            for (int i = 0; i < reader.FieldCount; i++)
                            {
                                string data = reader[i].ToString();
                                Console.Write(data + "\t");
                            }

                        }
                    }
                }
            }//

        }
    }
}