解决方案吗？解析查询时出错。 [令牌行号= 1，令牌行偏移= 77，令牌错误= S] [英] Solution please?There was an error parsing the query. [ Token line number = 1,Token line offset = 77,Token in error = S ]

问题描述

解析查询时出错。 [令牌行号= 1，令牌行偏移= 77，令牌错误= S]



我的代码

There was an error parsing the query. [ Token line number = 1,Token line offset = 77,Token in error = S ]

My Code

SqlCeConnection conn = new SqlCeConnection("Data Source=E:\\Project Final_Year\\Project Final\\MyProject\\ERU Implementation\\VirtualPetedit\\VirtualPet\\MyDB.sdf");
           string query = "INSERT INTO Events (event_name,event_descrption,event_type,date) VALUES('" + textBox1.Text + "', '" + textBox2.Text + "','" + comboBox1.SelectedItem.ToString() + "','" + dateTimePicker2.Value + "');";

           //SqlCommand cmd = new SqlCommand();
           try
           {
               conn.Open();
              // SqlDataAdapter adapter = new SqlDataAdapter();
               SqlCeCommand command = new SqlCeCommand(query, conn);

               command.ExecuteNonQuery();
               conn.Close();

               MessageBox.Show("Event added Successfully..!!");
           }
           catch (Exception err)
           {
               MessageBox.Show(err.Message);
           }

推荐答案

请不要那样做！

不要连接字符串以构建SQL命令。它让您对意外或故意的SQL注入攻击持开放态度，这可能会破坏您的整个数据库。改为使用参数化查询。



这也有可能解决你的问题。

Please, don't do it like that!
Do not concatenate strings to build a SQL command. It leaves you wide open to accidental or deliberate SQL Injection attack which can destroy your entire database. Use Parametrized queries instead.

The chances are that that will also cure your problem.

string query = "INSERT INTO Events (event_name,event_descrption,event_type,date) VALUES(@NM, @ED, @ET, @DT);";
try
   {
   conn.Open();
   SqlCeCommand command = new SqlCeCommand(query, conn);
   command.Parameters.AddWithValue("@NM", textBox1.Text);
   command.Parameters.AddWithValue("@ED", textBox2.Text);
   command.Parameters.AddWithValue("@ET", comboBox1.SelectedItem);
   command.Parameters.AddWithValue("@DT", dateTimePicker2.Value);
   command.ExecuteNonQuery();

这篇关于解决方案吗？解析查询时出错。 [令牌行号= 1，令牌行偏移= 77，令牌错误= S]的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！