C # Programming: Parameter Issues for the SQLCOMMAND.PARAMETERS.ADD () method.

Add 2 parameters to a stored procedure

SQL Statement Example: "Update [tablename] username = @username where [email protected]"

And then put the needed

Command. Parameters.Add (New SqlParameter ("@id", sqldbtype.varchar,50));
Cmd. Parameters.Add ("@username", Textusername.text);

The standard System.Data.SqlClient
That's the way.

Parameter must be added one at a

It's written by itself. You can add a new parameters array to the form.

"@username": variable names in SQL statements
SqlDbType.VarChar Variable Type
50 Type of size:

As a parameter passed into execution, so as to effectively avoid some injected attacks

Supplement://
//
Command. Parameters.Add (New SqlParameter ("@id", sqldbtype.varchar,50));
Prototype
Public SqlParameter Add (SqlParameter value);

Cmd. Parameters.Add ("@username", Textusername.text);
Prototype
Public SqlParameter Add (string parametername, object value);
Public SqlParameter Add (string parametername, SqlDbType SqlDbType);
Public SqlParameter Add (string parametername, SqlDbType sqldbtype, int size);
Public SqlParameter Add (string parametername, SqlDbType sqldbtype, int size, string sourcecolumn);

The first sentence in several overloaded code is the first, the second sentence is the second.

C # Programming: Parameter Issues for the SQLCOMMAND.PARAMETERS.ADD () method.