mysql-是什么导致我的UPDATE语句不起作用?
内容导读
互联网集市收集整理的这篇技术教程文章主要介绍了mysql-是什么导致我的UPDATE语句不起作用?,小编现在分享给大家,供广大互联网技能从业者学习和参考。文章包含3701字,纯文字阅读大概需要6分钟。
内容图文
![mysql-是什么导致我的UPDATE语句不起作用?](/upload/InfoBanner/zyjiaocheng/884/b86400284eff4006a4c8df2a14df164e.jpg)
大家晚上好
我正在使用以下内容来尝试更新MySQL数据库中的记录,但是记录没有被更新,并且我也没有捕获任何异常.您的帮助将不胜感激:
dbConn = New MySqlConnection("Server=" & FormLogin.ComboBoxServerIP.SelectedItem & ";Port=3306;Uid=trojan;Password=horse;Database=accounting")
Try
If dbConn.State = ConnectionState.Open Then
dbConn.Close()
Else
Try
dbConn.Open()
Dim dbAdapter As New MySqlDataAdapter("UPDATE customer " & _
"SET accountNumber= '" & TextBoxAccount.Text & "', nameLAST='" & TextBoxLastName.Text & "', nameFIRST='" & TextBoxFirstName.Text & "'" & _
"nameSALUTATION='" & ComboBoxSalutation.SelectedItem & "', nameCOMPANY='" & TextBoxCompanyName.Text & "', addressSTREET='" & TextBoxAddress1.Text & "'" & _
"addressSTREET1='" & TextBoxAddress2.Text & "', addressCITY='" & TextBoxCity.Text & "', addressSTATE='" & ComboBoxState.SelectedItem & "'" & _
"addressZIPCODE='" & MaskedTextBoxZip.Text & "', phone='" & MaskedTextBoxPhone.Text & "', fax='" & MaskedTextBoxFax.Text & "', email='" & TextBoxEmail.Text & "'" & _
"WHERE accountNumber='" & TextBoxAccount.Text & "';", dbConn)
Catch ex As Exception
MessageBox.Show("A DATABASE ERROR HAS OCCURED" & vbCrLf & vbCrLf & ex.Message & vbCrLf & _
vbCrLf + "Please report this to the IT/Systems Helpdesk at Ext 131.")
End Try
MessageBox.Show("Customer account SUCCESSFULLY updated!")
Call lockForm()
End If
Catch ex As Exception
MessageBox.Show("A DATABASE ERROR HAS OCCURED" & vbCrLf & vbCrLf & ex.Message & vbCrLf & _
vbCrLf + "Please report this to the IT/Systems Helpdesk at Ext 131.")
End Try
Call lockForm()
dbConn.Close()
解决方法:
使用MySQLCommand代替MySQLDataAdapter.您无法达到使用ADONet的目的,因为您的代码仍然容易受到sql注入的攻击.将其参数化.以下是您的代码中经过修改的代码.它使用Using-End Using来正确处理对象处置.
Dim ConnectionString As String ="Server=" & FormLogin.ComboBoxServerIP.SelectedItem & ";Port=3306;Uid=trojan;Password=horse;Database=accounting"
Dim iQuery As String = "UPDATE customer " & _
"SET accountNumber = @accountNumber, nameLAST = @nameLAST, nameFIRST = @nameFIRST, " & _
" nameSALUTATION = @nameSALUTATION, nameCOMPANY = @nameCOMPANY, addressSTREET = @addressSTREET, " & _
" addressSTREET1 = @addressSTREET1, addressCITY = @addressCITY, addressSTATE = @addressSTATE, " & _
" addressZIPCODE = @addressZIPCODE, phone = @phone, fax = @fax, email = @email " & _
"WHERE accountNumber = @accountNumber"
Using dbConn As New MySqlConnection(ConnectionString)
Using dbComm As New MySQLCommand()
With dbComm
.Connection = dbConn
.CommandType = CommandType.Text
.CommandText = iQuery
.Parameters.AddWithValue("@accountNumber", TextBoxAccount.Text )
.Parameters.AddWithValue("@nameLAST", TextBoxLastName.Text)
.Parameters.AddWithValue("@nameFIRST", TextBoxFirstName.Text)
.Parameters.AddWithValue("@nameSALUTATION", ComboBoxSalutation.SelectedItem)
.Parameters.AddWithValue("@nameCOMPANY", TextBoxCompanyName.Text)
.Parameters.AddWithValue("@addressSTREET", TextBoxAddress1.Text)
.Parameters.AddWithValue("@addressSTREET1", TextBoxAddress2.Text)
.Parameters.AddWithValue("@addressCITY", TextBoxCity.Text)
.Parameters.AddWithValue("@addressSTATE", ComboBoxState.SelectedItem)
.Parameters.AddWithValue("@addressZIPCODE", MaskedTextBoxZip.Text)
.Parameters.AddWithValue("@phone", MaskedTextBoxPhone.Text)
.Parameters.AddWithValue("@fax", MaskedTextBoxFax.Text)
.Parameters.AddWithValue("@email", TextBoxEmail.Text)
End With
Try
dbConn.Open
dbComm.ExecuteNonQuery()
MessageBox.Show("Customer account SUCCESSFULLY updated!")
Call lockForm()
Catch( ex as MySQLException)
MessageBox.Show("A DATABASE ERROR HAS OCCURED" & vbCrLf & vbCrLf & ex.Message & vbCrLf & _
vbCrLf + "Please report this to the IT/Systems Helpdesk at Ext 131.")
Finally
dbConn.Close()
End Try
End Using
End Using
内容总结
以上是互联网集市为您收集整理的mysql-是什么导致我的UPDATE语句不起作用?全部内容,希望文章能够帮你解决mysql-是什么导致我的UPDATE语句不起作用?所遇到的程序开发问题。 如果觉得互联网集市技术教程内容还不错,欢迎将互联网集市网站推荐给程序员好友。
内容备注
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 gblab@vip.qq.com 举报,一经查实,本站将立刻删除。
内容手机端
扫描二维码推送至手机访问。