【发布时间】:2013-04-24 15:20:39
【问题描述】:
我正在尝试从我的数据库中的“PurchaseTable”表中搜索购买并在 DataGrid 中显示结果,我知道如何使用 Windows 窗体:
private void SearchButton_Click(object sender, EventArgs e)
{
DataTable dt = new DataTable();
SqlDataAdapter SDA = new SqlDataAdapter("SELECT TitleOfRecord, DateOfPurchase FROM PurchaseTable WHERE (NameOfCustomer = '"+NameOfCustomerSText.Text+"')", connection);
//Query that will return the Title of the Records and Dates of purchases depending on the Customer which has been searched for
SDA.Fill(dt);
PurchaseResults.DataSource = dt;
//Results will appear in the PurchaseResults DataGrid
}
但我不知道如何用 WPF 来做,到目前为止我有这个但它不起作用:
private void SearchCustomerButton_Click(object sender, RoutedEventArgs e)
{
DataTable dt = new DataTable();
SqlDataAdapter SDA = new SqlDataAdapter("SELECT TitleOfRecord, DateOfPurchase FROM PurchaseTable WHERE (NameOfCustomer = '" + NameOfCustomerSText.Text + "')", connection);
//Query that will return the Title of the Records and Dates of purchases depending on the Customer which has been searched for
SDA.Fill(dt);
PurchaseResults.DataContext = dt;
//Results will appear in the PurchaseResults DataGrid
}
我有这些命名空间:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Windows;
using System.Windows.Controls;
using System.Windows.Data;
using System.Windows.Documents;
using System.Windows.Input;
using System.Windows.Media;
using System.Windows.Media.Imaging;
using System.Windows.Navigation;
using System.Windows.Shapes;
using System.Data.SqlClient;
using System.Data;
我用这段代码解决了我的问题:
private void SearchCustomerButton_Click(object sender, RoutedEventArgs e)
{
SqlDataAdapter da;
DataSet ds;
da = new SqlDataAdapter("SELECT TitleOfRecord, DateOfPurchase FROM PurchaseTable WHERE (NameOfCustomer = '" + NameOfCustomerSText.Text + "')", connection);
//Query that will return the Title of the Records and Dates of purchases depending on the Customer which has been searched for
ds = new DataSet();
da.Fill(ds);
PurchaseResults.ItemsSource = ds.Tables[0].DefaultView;
//Results will appear in the PurchaseResults DataGrid
}
【问题讨论】:
-
您的代码容易受到 sql 注入的影响:它实际上是在乞求被黑客入侵。在你做任何其他事情之前,你需要研究如何使用参数化查询。