c# - 如何将参数值传递给 SqlDataSource

Question

我正在使用 SqlDataSource 来填充 GridView。这是我的代码:

private void DataCall()
{
    //Object gets created for use from the class(clsDataConduit)
    clsDataDictionary AnOrder = new clsDataDictionary();
    //Declaring a new SqlDataSource from the inbuilt class library
    SqlDataSource sqlDS_ItemTable = new SqlDataSource();
    //Using our datasource object being cast onto our objects connectionstring
    sqlDS_ItemTable.ConnectionString = AnOrder.ConnectionString;
    //Our sql statement being passed through to our .SelectCommand method
    sqlDS_ItemTable.SelectCommand = "Select tblOrders.OrderId, tblItem.ItemName, tblOrders.DateOrdered from tblItem, tblOrders where tblItem.ItemId = tblOrders.ItemId AND tblOrders.AuthId = 5";
    //Adding controls to our SqlDataSource object
    this.Controls.Add(sqlDS_ItemTable);
    //Declares the DataSource for our gridview !
    grdOrder.DataSource = sqlDS_ItemTable;
    //Binds the data to refresh every time it's used
    grdOrder.DataBind();
}

正如您在最后的 SQL 语句中看到的那样，我正在执行 tblOrders.AuthId = 5 。但是我想做这样的事情 tblOrders.AuthId = SessionAuthId 。

我读了一些关于单独做某事的帖子 command.Parameters.Add(new SqlParameter("Name", dogName)); 但我不知道如何将它应用到我的代码。

我正在使用其他人的代码(教授)在作业中执行此操作，但我想对其进行稍微编辑，因为我将要开发登录系统等。

有人可以看看那个方法，看看我将如何更改它以将参数传递给它。这里还有完整的代码:http://pastebin.com/sdrvW5Zn

Answer 1

您可以使用 SelectParameters 属性进行参数化查询。

sqlDS_ItemTable.SelectCommand = "Select tblOrders.OrderId, tblItem.ItemName, tblOrders.DateOrdered from tblItem, tblOrders where tblItem.ItemId = tblOrders.ItemId AND tblOrders.AuthId = @authID";

sqlDS_ItemTable.SelectParameters.Add(new SqlParameter("@authID", SessionAuthID));