c# - 使用通配符创建参数化的 MySQL 查询

Question

我想使用基于参数的查询来填充数据网格。但是，我希望能够输入多个可能包含通配符的参数。但是，以下测试查询不正确。

有什么地方出错了吗？

SELECT `Customer ID`, `Company Name`, `Address Line 3` FROM XTest.all WHERE `Company Name` LIKE '%'+@Company+'%' ORDER BY `Company Name`;

Answer 1

string company = "%" + your_criteria_on_company + "%";

string sql = "SELECT 
                `Customer ID`, `Company Name`, `Address Line 3` 
              FROM XTest.all 
              WHERE 
                `Company Name` LIKE @Company 
              ORDER BY `Company Name`";

SqlCommand sqlCommand = new SqlCommand( sql, dbConnection );
sqlCommand.Parameters.AddWithValue( "@Company", company );

' add more of your code here
' and then
sqlCommand.Prepare();
MySqlDataReader resultSet = sqlCommand.ExecuteReader();

引用:

• 有关 SqlParameter AddWithValue 的文档
• Using Prepared Statement in C# with Mysql