从 VB 多个 where 条件更新 SQL 表

Question

我正在尝试从 VBA（使用以下代码）更新 SQL 表，但似乎无法正确。我想根据 A、B、C、D、E 的搜索条件更新第一、二、三和四列。我在这里做错了什么？没有给出错误，但表只是没有更新？谢谢

Sub UpdateData(A As String, B As String, C As String, D As String, E As String, one As Double, two As Double, three As Double, four As Double)

Dim sA As String, sB As String, sC As String, sD As String, sDesk As String, sE As String
Dim sone As Double, stwo As Double, sthree As Double, sfour As Double

Dim objConn As ADODB.Connection
Set objConn = New ADODB.Connection
objConn.ConnectionString = "Provider=SQLOLEDB;Data Source=source;Initial Catalog=Model_table;Integrated Security=SSPI"
objConn.Open
Set objRec = New ADODB.Recordset


Date = Format(Range("date").Value, "YYYY-MM-DD")
sA = A
sB = B
sC = C
sD = D
sE = E
sone = one
stwo = two
sthree = three
sfour = four
     StrSQL = "UPDATE pnl_results SET (" & sone & "," & stwo & "," & sthree & "," & sfour & ") Where  ('" & date =  sDate & "', '" & AA= sA & _
              "','" & BB= sB & "','" CC= & sC & "','" & DD= sD & "','" & EE=sE & ")"
     Set objRec = objConn.Execute(StrSQL)

objConn.Close
Set objConn = Nothing

End Sub

Answer 1

您混淆了Update 和Insert Into 之间的语法。它应该看起来更像这样：

StrSQL = "UPDATE pnl_results SET field1='value1', field2='value2' WHERE field3='value3' AND field4='value4'

Answer 2

您的代码中有几个错误：

• 您不需要括号。
• 将列名直接放在字符串中，不要用撇号括起来。
• 用撇号将所有字符串值括起来。
• 使用AND 或OR 运算符来组合不同的条件，而不是逗号。

试试这个：

StrSQL = "UPDATE pnl_results SET " & _
         " one = '" & sone & _
         "', two = '" & stwo & _
         "', three = '" & sthree & _
         "', four = '" & sfour & _
         "' Where date = '" & sDate & _
         "' AND AA = '" & sA & _
         "' AND BB = '" & sB & _
         "' AND CC = '" & sC & _
         "' AND DD = '" & sD & _
         "' AND EE = '" & sE & "'"

如 cmets 中所述，使用直接来自用户输入的值的内联查询会使您的代码容易受到 SQL 注入攻击。在查询中使用之前验证用户输入，或者更好地使用参数化查询。