【发布时间】:2020-04-25 12:23:14
【问题描述】:
Dim Connectionstring As String = "Data Source=(localdb)\MSSQLLocalDB;Initial Catalog=Anbar;Integrated Security=True"
Dim sqlcommand As New Data.SqlClient.SqlCommand
Dim sqlconnection As New Data.SqlClient.SqlConnection
Dim dataadapter As New Data.SqlClient.SqlDataAdapter(sqlcommand)
sqlconnection.ConnectionString = Connectionstring
sqlcommand.Connection = sqlconnection
sqlcommand.CommandText = "insert into [dbo].[User] ([name],[lastname],[username],[password]) VALUES (@name,@lastname,@username,@password)"
sqlcommand.Parameters.AddWithValue("@name", txtfristname.Text)
sqlcommand.Parameters.AddWithValue("@lastname", txtlastname.Text)
sqlcommand.Parameters.AddWithValue("@username", txtusernameregister.Text)
sqlcommand.Parameters.AddWithValue("@password", txtpasswordregister.Text)
sqlconnection.Open()
sqlcommand.ExecuteNonQuery()
sqlconnection.Close()
我的代码已经可以运行,但我想成为模块化程序......任何人都可以帮忙吗??
【问题讨论】:
-
使用参数化SQL很好,干得好!但是,请不要将密码存储为纯文本。
-
您可能需要多解释一下您想要什么。还有一个代码审查 SE 站点