Question

参数化查询,但未提供该参数。

namespace DataAccess{ public class DA { static DA() { conn = new SqlConnection(@"server=.\sqlexpress;database=govDB;integrated security=sspi"); cmd = new SqlCommand(); cmd.Connection = conn; } public static int ExcuteSql(string sqlText, CommandType commandType, string[] paraNmes, object[] paraValues) { if (conn.State != ConnectionState.Open) { conn.Open(); } cmd.CommandText = sqlText; cmd.CommandType = commandType; if (paraNmes != null) { for (int i = 0; i < paraNmes.Length; i++) { cmd.Parameters.AddWithValue(paraNmes[i], paraValues[i]); } } int count = cmd.ExecuteNonQuery(); cmd.Parameters.Clear(); conn.Close(); return count; }
namespace Business
{
public class OfficerBusiness { public int InsertOfficer(OfficerEntity oe) { string sqlText = "insert into tb_officer values(@oname,@ophoto,@omess,@oworkfor)"; string[] paraNames = {"@oname","@ophoto","@omess","@oworkfor" }; object[] paraValues = {oe.Oname,oe.Ophoto,oe.Omess,oe.Oworkfor }; int count = DA.ExcuteSql(sqlText,CommandType.Text,paraNames,paraValues); return count; }

Answer 1

//这行代码，没有把你sqlText中定义的参数，传递进去。你可以看看DA.ExecuteSql()你的这个封装方法，有没有重载的版本。
int count = DA.ExcuteSql(sqlText,CommandType.Text,paraNames,paraValues);