【发布时间】:2021-06-14 15:54:21
【问题描述】:
你们能帮帮我吗?
Private Sub BtnSimpan_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles BtnSimpan.Click
If BtnSimpan.Text = "&Simpan" Then
If txtKode.Text = "" Then
MsgBox("Kode Harus Di isi", MsgBoxStyle.Exclamation, "Peringatan")
txtKode.Focus()
Exit Sub
End If
Call bukaDB()
CMD = New MySqlCommand("SELECT KodeBarang from tabelbarang WHERE KodeBarang = '" & txtKode.Text & "'", Conn)
RD = CMD.ExecuteReader()
RD.Read()
If RD.HasRows Then
MsgBox("Maaf, Data dengan Kode tersebut telah ada", MsgBoxStyle.Exclamation, "Peringatan")
Else
simpan = "INSERT INTO tabelbarang (KodeBarang,NamaBarang,HargaBeli,HargaJual,Stok) VALUES ('" & txtKode.Text & "','" & txtNamaBarang.Text & "','" & txtHargaBeli.Text & "','" & txtHargaJual.Text & "','" & txtStok.Text & "')"
CMD = New MySqlCommand(simpan, Conn)
CMD.ExecuteNonQuery()
Call isiGrid()
BtnSimpan.Text = "&Tambah"
Call Bersih()
End If
Else
BtnSimpan.Text = "&Simpan"
'Call Bersih()
txtKode.Enabled = True
txtNamaBarang.Enabled = True
txtHargaBeli.Enabled = True
txtHargaJual.Enabled = True
txtStok.Enabled = True
txtKode.Focus()
End If
End Sub
【问题讨论】:
-
欢迎来到 Stack Overflow!请阅读How do I ask a good question?。
-
哎呀,这看起来很可怕——容易受到 sql 注入问题的影响!此外,没有人 不再使用
Call。关键字的唯一目的是保持与从 VB6 时代向前移植的旧代码的兼容性。 -
@JoelCoehoorn 郑重声明,我偶尔还是会用
Call,但我不会假装符合“现代”风格。
标签: vb.net