参数化SQL中Like和In的写法

2023年6月21日发(作者：)

参数化SQL中Like和In的写法like 参数string strSql = "select * from s where City like ’%’+ @add + ’%’";SqlParameter[] Parameters=new SqlParameter[1];Parameters[0] = new SqlParameter("@add", "bre");in 参数string strSql = "exec(’select * from s where AddressID in ()";SqlParameter[] Parameters = new SqlParameter[1];Parameters[0] = new SqlParameter("@add", "343,372,11481,11533,11535,11755,11884,12092,12093,12143");

2023年6月21日发(作者：)

参数化SQL中Like和In的写法like 参数string strSql = "select * from s where City like ’%’+ @add + ’%’";SqlParameter[] Parameters=new SqlParameter[1];Parameters[0] = new SqlParameter("@add", "bre");in 参数string strSql = "exec(’select * from s where AddressID in ()";SqlParameter[] Parameters = new SqlParameter[1];Parameters[0] = new SqlParameter("@add", "343,372,11481,11533,11535,11755,11884,12092,12093,12143");