http://www.developerfusion.com/tools/

[WebMethod]
 public int ExecuteInsert(string tableName, string[] fields, string[] fieldValues)
 {
  string sql = null;
  try
  {
   con.Open();
   sql = getInsertString(tableName, fields);
   SqlCommand command = new SqlCommand(sql, con);
   ArrayList al = getInsertParameters(tableName, fields);
   for (int i = 0; i < al.Count; i++)
   {
    object temp = (fieldValues[i].ToUpper() == "" ? (object)DBNull.Value : fieldValues[i]);
    SqlParameter op = (SqlParameter)al[i];

    if (!(temp == DBNull.Value))
    {
     temp = convertParameterValue(op, temp);
    }
    op.Value = temp;
    command.Parameters.Add(op);
   }
   return command.ExecuteNonQuery();
  }
  catch (Exception ex)
  {
   writeLog(ex.Source + "\t" + ex.Message + "\r\n\t\t\t" + sql);
   throw ex;
  }
  finally
  {
   con.Close();
  }
 }

• Public Function ExecuteInsert(tableName As String, fields As String(), fieldValues As String()) As Integer
•     Dim sql As String = Nothing
•     Try
•         con.Open()
•         sql = getInsertString(tableName, fields)
•         Dim command As New SqlCommand(sql, con)
•         Dim al As ArrayList = getInsertParameters(tableName, fields)
•         For i As Integer = 0 To al.Count - 1
•             Dim temp As Object = (If(fieldValues(i).ToUpper() = "", DirectCast(DBNull.Value, Object), fieldValues(i)))
•             Dim op As SqlParameter = DirectCast(al(i), SqlParameter)
•            
•             If Not (temp = DBNull.Value) Then
•                 temp = convertParameterValue(op, temp)
•             End If
•             op.Value = temp
•             command.Parameters.Add(op)
•         Next
•         Return command.ExecuteNonQuery()
•     Catch ex As Exception
•         writeLog(ex.Source + vbTab + ex.Message + vbCr & vbLf & vbTab & vbTab & vbTab + sql)
•         Throw ex
•     Finally
•         con.Close()
•     End Try
• End Function

转载于:https://www.cnblogs.com/Jinny/archive/2008/10/16/1312516.html