mysql实现搜索_mysql – 如何实现更高效的搜索功能？

原始答案

(向下滚动以查看更新)

你能尝试以下方法吗？

>构建一个列表,仅包含具有输入的文本框的值

>设置连接的字符串以及“AND”字符串

>将该字符串附加到标准SELECT语句

代码如下所示：

Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click

Dim Predicate1 As String = Me.TextBox1.Text

Dim Predicate2 As String = Me.TextBox2.Text

Dim Predicate3 As String = Me.TextBox3.Text

Dim PredicateList As New List(Of String)

Dim WhereClause As String

Dim Query As String

If Predicate1 <> String.Empty Then

PredicateList.Add("Name=""" & Predicate1 & """")

End If

If Predicate2 <> String.Empty Then

PredicateList.Add("Age=""" & Predicate2 & """")

End If

If Predicate3 <> String.Empty Then

PredicateList.Add("Gender=""" & Predicate3 & """")

End If

WhereClause = String.Join(" AND ", PredicateList.ToArray)

Query = "SELECT * FROM TABLE WHERE " & WhereClause

MessageBox.Show(Query)

End Sub

更新

继SQL注入的注释之后,这里有一个更新的示例.

Dim Command As SqlClient.SqlCommand

Dim Predicate1 As String = Me.TextBox1.Text

Dim Predicate2 As String = Me.TextBox2.Text

Dim Predicate3 As String = Me.TextBox2.Text

Dim ParameterList As New List(Of SqlClient.SqlParameter)

Dim PredicateList As New List(Of String)

Dim BaseQuery As String = "SELECT * FROM TABLE WHERE "

If Predicate1 <> String.Empty Then

PredicateList.Add("name = @name")

ParameterList.Add(New SqlClient.SqlParameter("@name", Predicate1))

End If

If Predicate2 <> String.Empty Then

PredicateList.Add("age = @age")

ParameterList.Add(New SqlClient.SqlParameter("@age", Predicate2))

End If

If Predicate3 <> String.Empty Then

PredicateList.Add("gender = @gender")

ParameterList.Add(New SqlClient.SqlParameter("@gender", Predicate3))

End If

Command = New SqlClient.SqlCommand(BaseQuery & String.Join(" AND ", PredicateList.ToArray))

Command.Parameters.AddRange(ParameterList.ToArray)