Requête paramétrée

BASE DE DONNEES(Requête paramétrée)

SQL server

using (SqlConnection conn = new SqlConnection(connectionString))
{
    //Préparation des paramètres
    SqlParameter paramID = new SqlParameter("@id", SqlDbType.Int);
    paramID.Value = 10;
    SqlParameter paramText = new SqlParameter("@text", SqlDbType.VarChar,50);
    paramText.Value = "Ceci est un test";
    SqlParameter paramDate = new SqlParameter("@date", SqlDbType.DateTime);
    paramDate.Value = DateTime.Now;
    SqlParameter paramFloat = new SqlParameter("@float", SqlDbType.Float);
    paramFloat.Value = 12.2;

    //Préparation de la commande
    String sql = string.Format("INSERT INTO TableTest(Id, Text, DateAndTime, FloatNumber) VALUES({0},{1},{2},{3})",
    paramID.ParameterName, paramText.ParameterName,
    paramDate.ParameterName, paramFloat.ParameterName);
    SqlCommand cmd = new SqlCommand(sql.ToString(), conn);

    //Ajout des paramètre à la commande
    cmd.Parameters.Add(paramID);
    cmd.Parameters.Add(paramText);
    cmd.Parameters.Add(paramDate);
    cmd.Parameters.Add(paramFloat);

    //Ouverture de la connection et exécution de la commande
    conn.Open();
    cmd.ExecuteNonQuery();
}

SHARE

Author

Hi, Its me Yassine. A webdesigner, blogspot developer and UI/UX Designer. I am a certified Themeforest top Author and Front-End Developer. I'am business speaker, marketer, Blogger and Javascript Programmer.

• 
• 
• 
• 
•