c#连接mysql的更新语句怎么写_使用C#在MySQL中更新语句

问题：查询中的location参数后缺少逗号.

解决方案：您需要使用逗号分隔参数.

建议：使用参数化查询来避免SQL注入攻击

尝试这个：

private void Update(string num,string name, string quant, string location, string category, string numquery)

{

// "UPDATE Inventory SET Inventorynumber='"+ num +"',Inventory_Name='"+name+"', Quantity ='"+ quant+"',Location ='"+ location+"' Category ='"+ category+"' WHERE Inventorynumber ='"+ numquery +"';";

string query = "UPDATE Inventory SET Inventorynumber=@Inventorynumber,Inventory_Name=@Inventory_Name, Quantity =@Quantity ,Location =@Location,Category =@Category WHERE Inventorynumber =@Inventorynumber";

if (this.OpenConnection() == true)

{

MySqlCommand cmd = new MySqlCommand();

cmd.CommandText = query;

cmd.Parameters.AddWithValue("@Inventorynumber",Convert.ToInt16(num));

cmd.Parameters.AddWithValue("@Inventory_Name",name);

cmd.Parameters.AddWithValue("@Quantity",quant);

cmd.Parameters.AddWithValue("@Location",location);

cmd.Parameters.AddWithValue("@Category",category);

cmd.Parameters.AddWithValue("@Inventorynumber",Convert.ToInt16(numquery));

cmd.Connection = serverconnection;

cmd.ExecuteNonQuery();

this.CloseConnection();

Bind();

}

}