Question

ASP.NET数据库连接

string settings = Convert.ToString(ConfigurationManager.ConnectionStrings["newsBiomensConn"]); //读取数据库连接字符串
OleDbConnection myconn = new OleDbConnection(settings); //创建数据库连接对象
myconn.Open(); //打开数据库连接
//创建SQL语句
string account = tbAccount.Text;
string psw = tbRepwd.Text;
string name = tbName.Text;
string sex = rblSex.Text.ToString();
string card = tbIDcard.Text;
string answer = tbAnswer.Text;
DateTime newsDate = DateTime.Now;
string strsql = "insert into Users(UserAccount,Password,UserName,UserSex,IDcard,Answer,UserAddData) values (";
strsql = strsql + "'" + account + "','" + psw + "','" + name + "','" + sex + "','" + card + "','" + answer + "','" + newsDate + "')";
//创建数据库命令
OleDbCommand mycmd = new OleDbCommand(strsql, myconn);
//测试语句
//Response.Write(strsql);
//Response.End();
mycmd.ExecuteNonQuery();
//关闭数据库
myconn.Close();
报错说是inert into语法错误

Answer 1

string strsql = "insert into Users(UserAccount,Password,UserName,UserSex,IDcard,Answer,UserAddData) values (";
strsql = strsql + "'" + account + "','" + psw + "','" + name + "','" + sex + "','" + card + "','" + answer + "','" + newsDate + "')";
改成
string strsql = "insert into [Users]([UserAccount],[Password],[UserName],[UserSex],[IDcard],[Answer],[UserAddData]) values (";
strsql = strsql + "'" + account + "','" + psw + "','" + name + "','" + sex + "','" + card + "','" + answer + "','" + newsDate + "')";

里面的password是保留字不可直接使用，其它的也许也有保留字，于是全部都给它加上[]