在Updata語句中使用參數

protected void Button2_Click(object sender, EventArgs e)<br /> {<br /> var cn = new SqlConnection();<br /> cn.ConnectionString = @"Data Source=./SQLEXPRESS;AttachDbFilename=|DataDirectory|Student.Mdf;Integrated Security=True;User Instance=True";<br /> var cmd = new SqlCommand();<br /> cmd.Connection = cn;<br /> cmd.CommandText = " update Student set StudentName = @StudentName where StudentID = @StudentID ";<br /> cmd.Parameters.AddWithValue("@StudentID",TextBox1.Text);<br /> cmd.Parameters.AddWithValue("@StudentName",TextBox2.Text);</p><p> cn.Open();<br /> var records = cmd.ExecuteNonQuery();<br /> cn.Close();<br /> }