UPDATE语句中的语法错误。 Visual Basic 2010 [英] Syntax error in UPDATE statement. Visual basic 2010

问题描述

我这个错误：

UPDATE语句中的语法错误。



我的代码是：

 Private Sub Button3_Click（sender As System.Object，e As System.EventArgs）Handles Button3.Click 
 con.Open（）
 Dim q As String =UPDATE Table1 SET &安培; 
FirstName ='& Me.txtFName.Text& 
'，SecondName ='& Me.txtSName.Text& 
'，SureName ='& Me.txtTName.Text& 
'，SocialNumber =& Me.txtID.Text& 
，年龄=& Me.txtAge.Text& & 
，YearofBirth =& Me.txtYear.Text& & 
，等级=& Me.txtLevel.Text& & 
WHERE ID =& Me.TextBox1.Text 
 
 
 Dim cmd As New OleDb.OleDbCommand（q，con）
 cmd.ExecuteNonQuery（）
 GetInfo（）
 Me .Close（）
 con.Close（）
 End Sub 
 

btw我正在使用Visual Basic 2010和Access 2016 for database

谢谢！



我尝试过：



我还没有尝试任何东西，因为我只是一个初学者。

解决方案

正如理查德所指出的，不要不这样做。它不仅会导致语法问题，而且在以这种方式编写代码时很容易破解数据库。相反，请执行以下操作：

  Dim  q  As  字符串 =   UPDATE Table1 SET& 
   FirstName = @ FirstName& 
  '，SecondName = @ SecondName& ... 
   WHERE ID = @ ID 
 ... 
 cmd.Parameters.AddWithValue（  @ FirstName，txtFirstName.Text）
 cmd.Parameters.AddWithValue（  @ SecondName，txtSecondName.Text）
 ... 
 cmd.Parameters.AddWithValue（  @ ID，txtID.Text）

I this error:
"Syntax error in UPDATE statement."

My code is:

Private Sub Button3_Click(sender As System.Object, e As System.EventArgs) Handles Button3.Click
       con.Open()
       Dim q As String = "UPDATE Table1 SET " &
           "FirstName='" & Me.txtFName.Text &
           "',SecondName='" & Me.txtSName.Text &
           "',SureName='" & Me.txtTName.Text &
           "',SocialNumber=" & Me.txtID.Text &
           ",Age=" & Me.txtAge.Text & " " &
           ",YearofBirth=" & Me.txtYear.Text & " " &
           ",Level=" & Me.txtLevel.Text & " " &
           "WHERE ID=" & Me.TextBox1.Text


       Dim cmd As New OleDb.OleDbCommand(q, con)
       cmd.ExecuteNonQuery()
       GetInfo()
       Me.Close()
       con.Close()
   End Sub

btw I am using Visual Basic 2010 and Access 2016 for database
Thank you!

What I have tried:

I haven't tried anything yet since I am just a beginner.

解决方案

As Richard pointed out, don't do it this way. Not only does it lead to syntax issues but it is very easy to hack your db when you write code this way. Instead do like this:

Dim q As String = "UPDATE Table1 SET " &
           "FirstName=@FirstName" &
           "',SecondName=@SecondName" & ...
           "WHERE ID=@ID" 
...
cmd.Parameters.AddWithValue("@FirstName", txtFirstName.Text)
cmd.Parameters.AddWithValue("@SecondName", txtSecondName.Text)
...
cmd.Parameters.AddWithValue("@ID", txtID.Text)

这篇关于UPDATE语句中的语法错误。 Visual Basic 2010的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！