搜索到的数据未加载到 asp.net 表单中的数据网格视图？

Question

当我点击搜索时，它将在表格上按名称搜索。（参考图 1）

Image 1

我的搜索代码

protected void srchbtn_Click(object sender, EventArgs e)
    {
        try
        {
            if (string.IsNullOrWhiteSpace(this.TextBox1.Text))
            {
                Response.Write("<script>alert('Search name is empty!')</script>");
               
            }
            else
            {

                con.Open();
                adapt = new SqlDataAdapter("select Convert(nvarchar(10),Date,121) as Date,Department,KaizenLead,Type,Observation,Onetimereapeat,Typeofwaste,Rootcase,ImageBefore,ImageAfter,Before,After,Improvement,Savings,Impleteam,validateby,Rootcase,safetyadmin,convert(nvarchar(10),Implementationdate,121) as Implementationdate,Status,Reason,FinanceRef  from GembaKaizen where KaizenLead like '" + TextBox1.Text + "'", con);
                dt = new DataTable();
                adapt.Fill(dt);
                gv_case.DataSource = dt;//gv_gase-grid view name
                con.Close();

                
            }
           
        }
        catch(SqlException)
        {
            Response.Write("<script>alert('Database error!')</script>");
        }
    }

Answer 1

我不确定我是否理解问题，但我可以看到您的代码存在两个问题：

1. sql查询中的like子句需要%否则就是相等

like '%" + TextBox1.Text + "%'"

1. Sql 注入 始终在查询中添加用户输入作为参数，否则容易发生 sql 注入

Answer 2

                    con.Open();
                    adapt = new SqlDataAdapter("select Convert(nvarchar(10),Date,121) as Date,Department,KaizenLead,Type,Observation,Onetimereapeat,Typeofwaste,Rootcase,ImageBefore,ImageAfter,Before,After,Improvement,Savings,Impleteam,validateby,Rootcase,safetyadmin,convert(nvarchar(10),Implementationdate,121) as Implementationdate,Status,Reason,FinanceRef  from GembaKaizen where KaizenLead like '" + TextBox1.Text + "'", con);
                    DataSet ds = new DataSet();
                    adapt.Fill(ds);
                    gv_case.DataSource = ds;
                    gv_case.DataBind();
                    con.Close();