我正在尝试从parameterized query应用程序查询public static void ValidateName(MySqlConnection conn,List EmpList, string Group)
{
string selectQuery = "Select Name from Employee where Group = @Group AND @Name in (FirstName, LastName);";
using (MySqlCommand cmd = new MySqlCommand(selectQuery, conn))
{
for (int i = 0; i < EmpList.Count; i++)
{
cmd.Parameters.Add("@Group", MySqlDbType.VarChar).Value = Group;
cmd.Parameters.Add("@Name", MySqlDbType.VarChar).Value = EmpList[i].Name;
var reader = cmd.ExecuteReader();
List lineList = new List();
while (reader.Read())
{
lineList.Add(reader.GetString(0));
}
if (lineList.Count <=0)
{
WriteValidationFailure(EmpList[i], "Failed");
}
}
}数据库。下面是代码,我在这里使用cmd.Parameters.Add("@Group", MySqlDbType.VarChar).Value = Group;