I am currently developing an application using C# WPF. I am trying to store data into a MySQL Database. Below is the code that I have.
MySqlCommand cmd = new MySqlCommand("", conn);
cmd.CommandText = "INSERT INTO BUG_REPORTS (bug_softwareID, bug_firstName, bug_lastName, bug_email, bug_description, bug_ip_addr, bug_dateReported) "
+ "VALUES (@softwareID, @firstName, @lastName, @email, @description, @ip_addr, @dateReported)";
cmd.Parameters.Add("@softwareID");
cmd.Parameters.Add("@firstName");
cmd.Parameters.Add("@lastName");
cmd.Parameters.Add("@email");
cmd.Parameters.Add("@description");
cmd.Parameters.Add("@ip_addr");
cmd.Parameters.Add("@dateReported");
cmd.Parameters["@softwareID"].Value = softwareID;
cmd.Parameters["@firstName"].Value = getFirstName();
cmd.Parameters["@lastName"].Value = getLastName();
cmd.Parameters["@email"].Value = getEmail();
cmd.Parameters["@description"].Value = getDescription();
cmd.Parameters["@ip_addr"].Value = ip_addr;
cmd.Parameters["@dateReported"].Value = date;
cmd.ExecuteNonQuery();
Everytime I try to insert a record it comes up with the error 'Only MySQLParameter objects may be stored. What am I doing wrong. I found article and everything appears to be OK.
Thanks for any help you can provide
解决方案
In your paramters try:
cmd.Parameters.Add(new OdbcParameter("@softwareID", softwareID));
And so on and so forth with the rest of your parameters.
And in all honesty it might be just as simple just to build your sql inline and execute the command without parameters unless your not validating text and are concerned about injection attacks.