溫馨提示×

sql中in的參數怎么注入

小新
529
2021-01-14 12:57:17
欄目: 云計算

sql中in的參數怎么注入

sql中in的參數注入示例:

為where in的每一個參數生成一個參數,代碼如下:

using (SqlConnection conn = new SqlConnection(connectionString))

{

conn.Open();

SqlCommand comm = new SqlCommand();

comm.Connection = conn;

//為每一條數據添加一個參數

comm.CommandText = "select * from Users(nolock) where UserID in (@UserID1,@UserId2,@UserID3,@UserID4)";

comm.Parameters.AddRange(

new SqlParameter[]{

new SqlParameter("@UserID1", SqlDbType.Int) { Value = 1},

new SqlParameter("@UserID2", SqlDbType.Int) { Value = 2},

new SqlParameter("@UserID3", SqlDbType.Int) { Value = 3},

new SqlParameter("@UserID4", SqlDbType.Int) { Value = 4}

});

comm.ExecuteNonQuery();

}

0
亚洲午夜精品一区二区_中文无码日韩欧免_久久香蕉精品视频_欧美主播一区二区三区美女