c# mysql insert,使用C＃插入记录到MySQL数据库

I am currently developing an application using C# WPF. I am trying to store data into a MySQL Database. Below is the code that I have.

MySqlCommand cmd = new MySqlCommand("", conn);

cmd.CommandText = "INSERT INTO BUG_REPORTS (bug_softwareID, bug_firstName, bug_lastName, bug_email, bug_description, bug_ip_addr, bug_dateReported) "

+ "VALUES (@softwareID, @firstName, @lastName, @email, @description, @ip_addr, @dateReported)";

cmd.Parameters.Add("@softwareID");

cmd.Parameters.Add("@firstName");

cmd.Parameters.Add("@lastName");

cmd.Parameters.Add("@email");

cmd.Parameters.Add("@description");

cmd.Parameters.Add("@ip_addr");

cmd.Parameters.Add("@dateReported");

cmd.Parameters["@softwareID"].Value = softwareID;

cmd.Parameters["@firstName"].Value = getFirstName();

cmd.Parameters["@lastName"].Value = getLastName();

cmd.Parameters["@email"].Value = getEmail();

cmd.Parameters["@description"].Value = getDescription();

cmd.Parameters["@ip_addr"].Value = ip_addr;

cmd.Parameters["@dateReported"].Value = date;

cmd.ExecuteNonQuery();

Everytime I try to insert a record it comes up with the error 'Only MySQLParameter objects may be stored. What am I doing wrong. I found article and everything appears to be OK.

Thanks for any help you can provide

解决方案

In your paramters try:

cmd.Parameters.Add(new OdbcParameter("@softwareID", softwareID));

And so on and so forth with the rest of your parameters.

And in all honesty it might be just as simple just to build your sql inline and execute the command without parameters unless your not validating text and are concerned about injection attacks.