C# SQL参数化存储(备忘)

System.Data.SqlClient.SqlParameter[] sqlpas = new System.Data.SqlClient.SqlParameter[]
{
new System.Data.SqlClient.SqlParameter("@er_objid",productid),
new System.Data.SqlClient.SqlParameter("@er_account",_account)
};

db_soufuntwp.ExecuteNonQuery("INSERT INTO dbo.SF_ExpendReview (Er_ObjID, Er_Account) VALUES (@er_objid, @er_account)", CommandType.Text, sqlpas);

 

 动态参数化存储

  List <SqlParameter> parameters = new List <SqlParameter>();

  if (1=1)

  {

      parameters.Add(........);

  }

  SqlParameter[] ppp = parameters.ToArray();