如何使用string.format 进行SQL操作？

[zzxap]

strSQL = "Insert Into TUTOR(tutor_type,tutor_emp_id,tutor_name,crs_num,cls_num,crt_user,crt_datetime) Values("
strSQL &= "'" & ReplaceString(DropDownList8.SelectedValue) & "',"
strSQL &= "'" & ReplaceString(txtEmpno2.Text.Trim) & "',"
strSQL &= "'" & ReplaceString(lblNamChn2.Text.Trim) & "',"
strSQL &= "'" & ReplaceString(lstCrsNum.SelectedValue) & "',"
strSQL &= "'" & ReplaceString(txtClsnum.Text.Trim) & "',"
strSQL &= "'" & Session("UserID") & "',"
strSQL &= "'" & Format(Now(), "yyyy/MM/dd HH:mm:ss") & "')"
clsDbProcess.ExecuteSQL(Session("Server"), Session("Database"), strSQL)

可否这样用？

clsDbProcess.ExecuteSQL(Session("Server"), Session("Database"), string.forma("strSQL"))

[一弗楚]

string.Format应该在拼装字符串时使用，字符串都拼完了还用它干嘛呢
比如：strSql=string.Format("INSERT INTO TUTOR VALUES('{0}','{1}')","abc","123");

[feiyun0112]

strSQL="Insert Into TUTOR(tutor_type) values('{0}')"

string.forma(strSQL,ReplaceString(DropDownList8.SelectedValue))

*****************************************************************************
欢迎使用CSDN论坛专用阅读器 : CSDN Reader(附全部源代码)
http://feiyun0112.cnblogs.com/

[xierfly]

[Quote=引用 1 楼 ahywg 的回复:]
string.Format应该在拼装字符串时使用，字符串都拼完了还用它干嘛呢
比如：strSql=string.Format("INSERT INTO TUTOR VALUES('{0}','{1}')","abc","123");
[/Quote]



同意。

[zzxap]

SqlConnection conn = new SqlConnection("server=zzy;integrated security=sspi;database=library");
SqlCommand cmd;
private void btninsert_Click(object sender, EventArgs e)
{
conn.Open();
string _sql = "insert into login values('{0}','{1}','{2}')";

/*
Format方法：
①、string.Format(string format,object arg0);
②、string.Format(string format,params object[] args);
③、string.Format(IFormatProvider provider,string format,params object[] args);
④、string.Format(string format,object arg0,object arg1,object arg2);
*/

//④：string.Format(string format,object arg0,object arg1,object arg2);
_sql = string.Format(_sql, this.textBox1.Text.ToString().Trim(),this.textBox2.Text.ToString().Trim(),this.textBox3.Text.ToString().Trim());

/*
②：string.Format(string format,params object[] args);
object[] aa = new object[] { 'a', 'b', 'c', 'd', 'e' };
_sql = String.Format(_sql, aa);
*/
cmd = new SqlCommand(_sql, conn);
cmd.ExecuteNonQuery();
conn.Close();
MessageBox.Show("Insert the values Successfully!");
}

[zzxap]

upda = String.Format( "update 车间存料 set " & A & "= {0} ", total)
A是变量

[zzxap]

strSql = string.Format("SELECT * FROM Users WHERE UserId='{0}'AND PassWord='{1}' collate Chinese_PRC_CS_AI", Edit_UserID.Text,Edit_PassWord.Text);

collate Chinese_PRC_CS_AI表示分大小写

[wuyq11]

String.Format(语句{0},参数值）；

[lovehongyun]

你都拼接了.还用format干嘛?

string.format用法:

string sql = @"insert into table1 (id,name) values({0},'{1}')";
SqlCommand cmd = new SqlCommand(string.Format(sql,1,"xxxx"),conn);