c#查询参数化例子

--Web.Config 配置

  <appSettings>        
        <add key="MessageBoardConn" value="server=IP地址;uid=sa;pwd=;database=MessageBoard" />  
   </appSettings>

---页面绑定代码:(查询参数化)

String DBConnStr;
   DataSet MyDataSet=new DataSet();
   TextBox1.Text ="'2";
   System.Data.SqlClient.SqlDataAdapter DataAdapter=new System.Data.SqlClient.SqlDataAdapter();
   DBConnStr=System.Configuration.ConfigurationSettings.AppSettings["MessageBoardConn"];
   System.Data.SqlClient.SqlConnection myConnection = new System.Data.SqlClient.SqlConnection(DBConnStr);
   if (myConnection.State!=ConnectionState.Open)
   {
    myConnection.Open();
   }  
   System.Data.SqlClient.SqlCommand myCommand = new System.Data.SqlClient.SqlCommand("select   *  from  TB_B_Zixun where  Oid=@id",myConnection);
   myCommand.Parameters.Add("@id",SqlDbType.Int );
   myCommand.Parameters["@id"].Value =2 ; //参数化赋值
   myCommand.ExecuteNonQuery();
   DataAdapter.SelectCommand = myCommand;
   if (MyDataSet!=null)
   {
    DataAdapter.Fill(MyDataSet,"table");
   }
   DataGrid1.DataSource=MyDataSet;
   DataGrid1.DataBind();
   if (myConnection.State == ConnectionState.Open)
   {
    myConnection.Close();
   }

 

---页面绑定代码:(更新参数化)

 String DBConnStr;
   DataSet MyDataSet=new DataSet();
   TextBox1.Text ="'2";
   System.Data.SqlClient.SqlDataAdapter DataAdapter=new System.Data.SqlClient.SqlDataAdapter();
   DBConnStr=System.Configuration.ConfigurationSettings.AppSettings["MessageBoardConn"];
   System.Data.SqlClient.SqlConnection myConnection = new System.Data.SqlClient.SqlConnection(DBConnStr);
   if (myConnection.State!=ConnectionState.Open)
   {
    myConnection.Open();
   }  

   System.Data.SqlClient.SqlCommand myCommand = new System.Data.SqlClient.SqlCommand("update  TB_B_Zixun set ParentID=@ParentID where Oid=@id",myConnection);
   myCommand.Parameters.Add("@id",SqlDbType.Int );
   myCommand.Parameters["@id"].Value =56; //参数化赋值

   myCommand.Parameters.Add("@ParentID",SqlDbType.Int );
   myCommand.Parameters["@ParentID"].Value =2; //参数化赋值

   myCommand.ExecuteNonQuery();

   if (myConnection.State == ConnectionState.Open)
   {
    myConnection.Close();
   }