VC中使用SQL语句的时候如何使用变量？高分！

[hardstudylulin]

在VC中使用ADO 进行数据库查询等操作，使用SQL语句的时候如何使用变量。

例如：
m_pRecordset.CreateInstance(__uuidof(Recordset));
m_pRecordset->Open("SELECT * FROM Operator_Table WHERE Level= 'A%'
theApp.m_pConnection.GetInterfacePtr(),
adOpenDynamic,adLockOptimistic,adCmdText);
中的语句“SELECT * FROM Operator_Table WHERE Level= 'A%'”
我想用一个变量CString strValue;来代替‘A%’。
也就是类似这样：“SELECT * FROM Operator_Table WHERE Level= strValue”
请问如何表达？
急疯了！谢谢各位！

[hardstudylulin]

谢谢：ponydph(poiny)
还有没有更简单的表达方法，例如在VB中可用‘“str”’!

[flyelf]

SELECT * FROM Operator_Table WHERE Level= '%s'

[zyleon]

CString str="abc";
CString s;
s.Format("SELECT * FROM Operator_Table WHERE Level= '%s'",str);

[hardstudylulin]

非常感谢各位！开饷了！

[3ks]

zyleon(zy)的方法不错，先把sql语句format出来，这样代码也比较直观、易读

[快乐鹦鹉]

CString strValue;
CString sSql;
sSql.Format("SELECT * FROM Operator_Table WHERE Level= '%s',strValue);
m_pRecordset->Open(_bstr_t(sSql),theApp.m_pConnection.GetInterfacePtr(),
adOpenDynamic,adLockOptimistic,adCmdText);

[mynamelj]

CString str;
str.Format("SELECT * FROM Operator_Table WHERE Level = '%s'",strValue);

pRecordset->Open((LPCSTR)str,theApp.m_pConnection.GetInterfacePtr(),
adOpenDynamic,adLockOptimistic,adCmdText);

[yanw0212]

sql = " SELECT DISTINCT a.LogID, a.HouseID, a.IPAddress, a.ControllerID,a.FirstTime ,a.FirstInfo, \
a.SecondTime,a.SecondInfo , w.WorkModeName, c.LogicName ,h.OwnerName, h.OwnerMobilePhone, \
h.ResidentName, h.ResidentMobilePhone, r.RoomName, d.DeviceName ,p.PortNum , p.PortType , \
(SELECT u.UserName FROM t_UserInfo u WHERE a.FirstUserID=u.UserID) as FirstUser,\
(SELECT u.UserName FROM t_UserInfo u WHERE a.SecondUserID=u.UserID) as SecondUser \
FROM t_AlarmLog AS a \
INNER JOIN t_AlarmPortLog AS p ON p.LogID=a.LogID \
INNER JOIN t_WorkMode AS w ON w.WorkModeID=a.WorkModeID \
INNER JOIN t_RoomInfo AS r ON r.HouseID=a.HouseID AND r.RoomID=p.RoomID \
INNER JOIN t_DeviceInfo AS d ON d.DeviceID=p.DeviceID \
INNER JOIN t_HouseInfo AS h ON h.HouseID=a.HouseID \
INNER JOIN t_ControlLogicInfo AS c ON c.LogicID=a.LogicID AND c.HouseID=a.HouseID \
WHERE a.FirstInfo is not NULL AND a.SecondInfo IS NOT NULL AND d.DeviceName

LIKE '%";
sql += m_alarmtype;
sql +="%'";

[_三皮_]

CString strSQL;
strSQL="SELECT * FROM Operator_Table WHERE Level='"+strValue+"'";
m_pRecordset->Open(strSQL,theApp.m_pConnection.GetInterfacePtr(),adOpenDynamic,adLockOptimistic,adCmdText);

用'"+strValue+"'引用你的变量

[北京的雾霾天]

还是用Parameter比较好些.......

[loki2k]

用CString 的Format函数
如：
CString value("");
CString sqlstr("");
value = 查询的值;
sqlstr.Format("select * from ip_alarmlist where neid = '%s'",value);
也可以用 hbxtlhx(下着春雨的天) 说的，最好是用他的方法，安全性高些！

[aoosang]

其实蛮简单的,楼上的把答案都说了,开始接分了

[lg2001]

接分，全让楼上的给说了

[lhzhang1381]

我顶一下吧!

[oyljerry]

CString的Format中%s引入你的字符串变量

[Mr-Chen]

cstring sqlcommand;
st = "SELECT * FROM Operator_Table WHERE Level= ";
sqlcommand.format("s%s%",st,strValue);

[zephyr518]

int nYear,nMonth,nDay;
nYear = atoi(strtok(strValue.GetBuffer(strValue.GetLength()),"-"));
nMonth = atoi(strtok(NULL,"-"));
nDay = atoi(strtok(NULL,"-"));
strValue.ReleaseBuffer();
strSql.Format("SELECT * FROM Budget where Year(DateA)=%d and Month(DateA)=%d and Day(DateA)=%d",nYear,nMonth,nDay);
pTodayRes->Open(_variant_t(strSql),m_pConnection.GetInterfacePtr(), adOpenDynamic,adLockOptimistic,adCmdText);

[zephyr518]

int nYear,nMonth,nDay;
nYear = atoi(strtok(strValue.GetBuffer(strValue.GetLength()),"-"));
nMonth = atoi(strtok(NULL,"-"));
nDay = atoi(strtok(NULL,"-"));
strValue.ReleaseBuffer();
strSql.Format("SELECT * FROM Budget where Year(DateA)=%d and Month(DateA)=%d and Day(DateA)=%d",nYear,nMonth,nDay);
pTodayRes->Open(_variant_t(strSql),m_pConnection.GetInterfacePtr(), adOpenDynamic,adLockOptimistic,adCmdText);

[shenke410]

注意 = 和 LIKE 的区别！！！

[社会栋梁]

“SELECT * FROM Operator_Table WHERE Level= 'A%'”
str.Format(“SELECT * FROM Operator_Table WHERE Level= 'A%%'”)
要%%来表示%