【发布时间】:2017-10-15 09:16:31
【问题描述】:
我正在获取或设置访问器除外
namespace WindowsFormsApplication1
{
public partial class Form1 : Form
{
SqlConnection con = new SqlConnection(@"Data Source=.\SQLEXPRESS;AttachDbFilename=C:\Users\KARTHICK\Documents\test.mdf;Integrated Security=True;Connect Timeout=30;User Instance=True");
public Form1()
{
InitializeComponent();
}
private void button1_Click(object sender, EventArgs e)
{
con.Open();
SqlCommand cmd = con.CreateCommand();
cmd.CommandType = CommandType.Text;
cmd.CommandText = "insert into table1 values('" + textBox1.Text + "','" + textBox2.Text + "','" + textBox3.Text + "')";
cmd.ExecuteNonQuery();
con.Close();
MessageBox.Show("record inserted successfully");
}
public void display
{
con.Open();
SqlCommand cmd = con.CreateCommand();
cmd.CommandType = CommandType.Text;
cmd.CommandText = "select * from table1";
cmd.ExecuteNonQuery();
DataTable dt=new DataTable();
SqlDataAdapter dt= new SqlDataAdapter(cmd);
da.fill(dt);
con.Close();
}
private void Form1_Load(object sender, EventArgs e)
{
display();
}
}
}
【问题讨论】:
-
你在
public void display上的函数名后面缺少() -
你能在你的代码中添加一些描述吗?
-
在哪一行得到错误?顺便说一句,听说过sql injection attacks?