数据库更新中的多个WHERE条件？ [英] Multiple WHERE Conditions in database Update ?

问题描述

嗨所有

有些人会建议我如何在数据库中添加多个条件时更新它

i尝试使用下面的代码，但它不成功并出现语法查询表达式中的错误（缺少运算符）

hi all
can some pls advise me how i can add multiple where conditions in database when updated it
i try to use below code but its not successful and appear Syntax error (Missing operator )in query expression

SavInto1.CommandText = "UPDATE PrintDetails set BaseFabricColor=" & "'" & TextBox3.Text & "'" & ",ArtWorkRef = " & "'" & TextBox4.Text & "'" & " WHERE OrderNo =" & "'" & TextBox1.Text & " AND PrintOn=" & "'" & TextBox2.Text & " '"

推荐答案

当前的问题是你错过了一个引用：

The immediate problem is that you have missed out a quote:

SavInto1.CommandText = "UPDATE PrintDetails set BaseFabricColor=" & "'" & TextBox3.Text & "'" & ",ArtWorkRef = " & "'" & TextBox4.Text & "'" & " WHERE OrderNo =" & "'" & TextBox1.Text & " AND PrintOn=" & "'" & TextBox2.Text & " '"

应该是

Should be

SavInto1.CommandText = "UPDATE PrintDetails set BaseFabricColor='" & TextBox3.Text & "', ArtWorkRef = '" & TextBox4.Text & "' WHERE OrderNo ='" & TextBox1.Text & "' AND PrintOn='" & TextBox2.Text & "'"

但请不要'这样做！

不要连接字符串来构建SQL命令。它让您对意外或故意的SQL注入攻击持开放态度，这可能会破坏您的整个数据库。请改用参数化查询。

But please don't do it like that!
Do not concatenate strings to build a SQL command. It leaves you wide open to accidental or deliberate SQL Injection attack which can destroy your entire database. Use Parametrized queries instead.

这篇关于数据库更新中的多个WHERE条件？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！