Question

asp.net 中SQL语句问题，

string sel = "SELECT User_Name,User_Password FROM User WHERE User_Name=tname.text AND User_Password=tpassword.Text";
SqlConnection con = linkdatabase.CreateConnection();
con.Open();
SqlCommand command = new SqlCommand();
command.Connection = con;
command.CommandType = CommandType.Text;
command.CommandText = sel;
SqlDataReader reader = command.ExecuteReader(CommandBehavior.CloseConnection);
总是提示Incorrect syntax near the keyword 'User'.
SELECT User_Name, User_Password FROM [User] WHERE (User_Name = '"+tname.Text+"') AND (User_Password = '"+tpassword.Text+"')";
我自己解决了应该是这样

Answer 1

语法不对啊。
User_Name=tname.text AND User_Password=tpassword.Text
这些应该用字符串拼接的。不能直接写到一起。

Answer 2

晕，string sel = "SELECT User_Name,User_Password FROM User WHERE User_Name=tname.text AND User_Password=tpassword.Text";
改下：string sel = "SELECT User_Name,User_Password FROM User WHERE User_Name=‘ “ +tname.text +“ ’ AND User_Password= ' ”+tpassword.Text+“ ’ ";

Answer 3

LZ 你让我找到了自尊