. NET (C #) Parameters

SqlCommand cmd = new SqlCommand ("INSERT INTO
Users (Username,realname,password,sex,email,question,answer) values
(@USERNAME, @REALNAEM, @PWD, @SEX, @EMAIL, @QUESTION, @ANSWER) ",
conn);

Add a parameter to the command and assign a value

Cmd. Parameters.Add ("@ID", SqlDbType.Int). Value =
Int. Parse (TxtUserId.Text.Trim ());

Cmd. Parameters.Add ("@USERNAME", SqlDbType.NVarChar). Value =
TxtUserName.Text.Trim ();

Cmd. Parameters.Add ("@REALNAEM", SqlDbType.NVarChar). Value =
TxtRealName.Text.Trim ();

Cmd. Parameters.Add ("@PWD", SqlDbType.NVarChar). Value =
TxtPwd.Text.Trim ();

Cmd. Parameters.Add ("@SEX", SqlDbType.NVarChar). Value =
RblSex.SelectedItem.Text;

Cmd. Parameters.Add ("@EMAIL", SqlDbType.NVarChar). Value =
TxtEmail.Text.Trim ();

Cmd. Parameters.Add ("@QUESTION", SqlDbType.NVarChar). Value =
DplQuestion.SelectedItem.Text;

Cmd. Parameters.Add ("@ANSWER", SqlDbType.NVarChar). Value =
TxtAnswer.Text.Trim ();

int v = cmd. ExecuteNonQuery ();

if (!string. IsNullOrEmpty (KeyWord))
{
Strsql.append ("and NAME like @NAME");
}
list<sqlparameter> iliststr = new list<sqlparameter> ();
Iliststr.add (New SqlParameter ("@TYPEID", TYPEID));
if (!string. IsNullOrEmpty (KeyWord))
{
Iliststr.add (New SqlParameter ("@NAME", "%" + KeyWord + "%"));//like's notation
}
sqlparameter[] Parameters = Iliststr.toarray ();

. NET (C #) Parameters