mysql - VB.Net 中 Mysql 中插入查询的语法错误

Question

我正在VB.NET中做项目，后端是mysql

请告诉我错误发生在哪里

Public Sub ins()
    con.Open()
    Dim cmd1 As New OdbcCommand("insert into party values('" + pcode_txt.Text + "','" + Trim(UCase(name_txt.Text)) + "','" + Trim(UCase(addr_txt.Text)) + "','" + phone_txt.Text + "','" + combo_route.SelectedItem + "','" + combo_area.SelectedItem + "'", con)
    cmd1.ExecuteNonQuery()
    con.Close()
End Sub

我得到的错误是:

ERROR [42000] [MySQL][ODBC 3.51 Driver][mysqld-5.6.24]You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

Answer 1

您错过了值列表的右括号:

Dim cmd1 As New OdbcCommand("insert into party values('" + pcode_txt.Text + "','" + Trim(UCase(name_txt.Text)) + "','" + Trim(UCase(addr_txt.Text)) + "','" + phone_txt.Text + "','" + combo_route.SelectedItem + "','" + combo_area.SelectedItem + "')", con)

我的答案完全适合您的问题，但正如评论中所建议的那样，字符串连接并不是构建查询的可靠方法。

更安全的解决方案是基于参数的。如果可能，请避免在应用程序中创建 SQL 代码并依赖服务器语句(存储过程和/或 View )。