这个错误是怎么回事？ ExecuteNonQuery：CommandText 属性尚未初始化答案

【问题标题】：What is with this error? ExecuteNonQuery: CommandText property has not been initialized这个错误是怎么回事？ ExecuteNonQuery：CommandText 属性尚未初始化
【发布时间】：2014-08-21 16:50:22
【问题描述】：

请帮助大家。在没有当前密码和新密码的情况下进行更新时，它可以完美运行，但是如果我将包括更新密码，则会引发错误。这是我的代码：

    protected void UpdateBtn_Click(object sender, EventArgs e)
    {
        connection.Open();
        int queryStrId = Convert.ToInt32(Request.QueryString.Get("Id"));
        string query = "";

// Works fine here..
        if (CurrPass.Text == "" && NewPass.Text == "")
        {
            query = "UPDATE RegDetails SET Firstname = '" + FirstName.Text + "', Lastname = '" + LastName.Text + "', Gender = " + gender + ", AddressLocation = '" + Address.Text + "', Position = '" + Position.Text + "', CurrentStatus = " + status + ", Username = '" + Username.Text + "' WHERE Id = " + queryStrId;
        }
// Does not work. Display error "ExecuteNonQuery: CommandText property has not been initialized". What's wrong with this?
        else
        {
            if (CurrPass.Text != "" && NewPass.Text != "" && CurrPass.Text == currentPassword)
            {
                query = "UPDATE RegDetails SET Firstname = '" + FirstName.Text + "', Lastname = '" + LastName.Text + "', Gender = " + gender + ", AddressLocation = '" + Address.Text + "', Position = '" + Position.Text + "', CurrentStatus = " + status + ", Username = '" + Username.Text + "', Password = '" + NewPass.Text + "' WHERE Id = " + queryStrId;
            }
        }

        SqlCommand commandUpdate = new SqlCommand(query, connection);
        commandUpdate.ExecuteNonQuery();
        connection.Close();
        Response.Redirect("Details.aspx");
    }

【问题讨论】：

标签： executenonquery

【解决方案1】：

这必须评估为假：

if (CurrPass.Text != "" && NewPass.Text != "" && CurrPass.Text == currentPassword)

另外，为了皮特，使用参数化 SQL。

【讨论】：