Multiple parameterization is fixed relatively easy, a number of dynamic on a bit ... Work with problems to sort out share, on the code
sqlparameter[] param = new sqlparameter[] {}; list<sqlparameter> sqlparameterlist = new list<sqlparameter> (); Here is the point, take a mind to remember. if(!string. IsNullOrEmpty (cpId)) {SQL+="and a.cpid [email protected]"; Sqlparameterlist.add (NewSqlParameter {parametername ="@cpId", Value = cpId, SqlDbType = SqlDbType.VarChar, Size = - }); } if(!string. IsNullOrEmpty (cpname)) {SQL+="and b.name like @cpName"; Sqlparameterlist.add (NewSqlParameter {parametername ="@cpName", Value ='%'+ CPName +'%', SqlDbType = SqlDbType.VarChar, Size = - }); } if(!string. IsNullOrEmpty (status)) {SQL+="and b.status = @status"; Sqlparameterlist.add (NewSqlParameter {parametername ="@status", Value = status, SqlDbType = SqlDbType.Int, Size =Ten }); } //SQL + = "ORDER by createdatetime Desc";param= Sqlparameterlist.toarray ();
Finally, it's OK with Param.
SqlParameter Multi-parameter dynamic splicing to solve parametric problems