問題描述

正如你們中的一些人可能從我之前的帖子中看到的那樣，我是使用 C# 創建網站的新手(盡管我有相當多的將它用于 Windows 窗體應用程序的經驗).強大的力量讓我遠離 PHP，但我一直在我認為的基礎知識上失敗.

As some of you may of seen from my previous post I'm new to using C# to create websites (Although I have a fair bit of experience using it for Windows Forms apps). The powers that be are tempting me away from PHP but I keep failing at what I consider the basics.

無論如何，這是我的問題.我正在嘗試在 SQL 數據庫中創建一個簡單的條目.我知道我與數據庫的連接很好，因為我可以整天執行 SELECT 查詢，但我在使用 Insert 時遇到了問題.

Anyway, this is my issue. I am trying to create a simple entry into a SQL database. I know my connection to the DB is fine as I can reel off SELECT queries all day long but I'm having trouble with using Insert.

這是我的代碼:

string filename = "abc123.jpg";
SqlConnection link = new SqlConnection(//you dont need to see my data here ;));
string sqlcode = "INSERT INTO file_uploads (upload_filename VALUES ("+filename+")";
SqlCommand sql = new SqlCommand(sqlcode,link);
link.open();
sql.ExecuteNonQuery();

這會導致 try/catch 返回無效的列名 abc123.jpg".

This results in "Invalid column name abc123.jpg" returned from the try/catch.

任何幫助將不勝感激.(我希望他們能讓我在 PHP 中做到這一點，哈哈！)

Any help would be appreciated. (I wish they would let me do this in PHP lol!)

謝謝，

絆腳石

推薦答案

你在列名后面缺少一個括號，值代表一個字符串，因此必須用引號引起來:

You are missing a parenthesis after the column name and the value represents a string and as such must be enclosed in quotes:

string sqlcode = "INSERT INTO file_uploads (upload_filename) " + 
                 "VALUES ('"+filename+"')";

但是，正確的方法是使用參數化查詢:

However, the correct way would be to use a parameterized query:

string filename = "abc123.jpg";
SqlConnection link = new SqlConnection(/*you dont need to see my data here ;)*/);
string sqlcode = "INSERT INTO file_uploads (upload_filename) VALUES (@filename)";
SqlCommand sql = new SqlCommand(sqlcode,link);
sql.Parameters.AddWithValue("@filename", filename);
link.open();
sql.ExecuteNonQuery();

這篇關于SQL INSERT - 列名無效的文章就介紹到這了，希望我們推薦的答案對大家有所幫助，也希望大家多多支持html5模板網！