c# - SQLCommandBuilder 效率

Question

我从 msdn 得到了这个摘录 MSDN COMMAND BUILDER CLASS.在 ASP.NET 中使用快速插入、更新或从表中删除是否会很低效？!

 public static DataSet SelectSqlRows(string connectionString, string queryString, string tableName)
{
    using (SqlConnection connection = new SqlConnection(connectionString))
    {


        SqlDataAdapter adapter = new SqlDataAdapter();
        adapter.SelectCommand = new SqlCommand(queryString, connection);
        SqlCommandBuilder builder = new SqlCommandBuilder(adapter);

        connection.Open();

        DataSet dataSet = new DataSet();
        adapter.Fill(dataSet, tableName);

        //code to modify data in DataSet here

        builder.GetUpdateCommand();

       //Without the SqlCommandBuilder this line would fail
       adapter.Update(dataSet, tableName);

       return dataSet;
    }
}

Answer 1

您的代码在效率方面没有问题。一个建议是使用存储过程或参数化查询，而不是直接执行查询字符串，这将有助于防止 SQL 注入(inject)。

引用:

http://www.dotnetperls.com/sqlparameter