怎样用WHERE语句通过combobox加载条件，限定搜索范围？

Question

Dim connStr As String = _
            "SELECT (星期),(姓名)" & _
            "FROM [Zhigong]" & _
            "WHERE (姓名) = '张三丰'"

<br/>

用上述语句能正确查询，但是换成下列语句,通过combobox1选择“张三丰”就出现错误。

Dim connStr As String = _
            "SELECT (星期),(姓名)" & _
            "FROM [Zhigong]" & _
            "WHERE (姓名) = combobox1.text"

 

Answer 1

Dim connStr As String = "SELECT (星期),(姓名) FROM [Zhigong] WHERE (姓名) = '" & combobox1.text & "'"

---

歡迎參觀我的Blog.NET菜鳥自救會

Answer 2

 Dim conn As New SqlConnection()
        Dim cmd As New SqlCommand("SELECT 星期,姓名" & _
            "FROM [Zhigong]" & _
            "WHERE 姓名 = @name", conn)
        cmd.Parameters.AddWithValue("@name", ComboBox1.Text)

 

记得要防SQL Injection

---

• The blog of typewriter職人
• Convert C# to VB.NET
• /*If my concept is wrong ,please correct me.Thanks.*/

Answer 3

多谢两位指点！