ASP.Net System.Data.SqlClient.SqlException:“关键字 'LIKE' 附近有语法错误。

Question

在做课程设计的时候遇到了这个问题，但我本身对asp.net不是特别熟练，求大神指导
protected void Button1_Click(object sender, EventArgs e)
{
string condstr = "", xb, mysql;
if (TextBox1.Text != "")
condstr = "sno LIKE '" + TextBox1.Text + "% '";
if (TextBox2.Text != "")
if (condstr == "")
condstr = "sname LIKE '" + TextBox2.Text + "% '";
else
condstr = condstr + "AND sname LIKE '" + TextBox2.Text + "% '";
if (RadioButton1.Checked)
xb = "男";
else if (RadioButton2.Checked)
xb = "女";
else
xb = "";
if (xb != "")
if (condstr == "")
condstr = "ssex= '" + xb + "'";
else
condstr = condstr + "AND ssex= '" + xb + "'";
if (TextBox3.Text != "")
if (condstr == "")
condstr = "snation LIKE '" + TextBox3.Text + "% '";
else
condstr = condstr + "AND snation LIKE '" + TextBox3.Text + "% '";
if (TextBox4.Text != "")
if (condstr == "")
condstr = "sclass LIKE '" + TextBox4.Text + "% '";
else
condstr = condstr + "AND sclass LIKE '" + TextBox4.Text + "% '";

        if (condstr == "")
            mysql = "SELECT*FROM [student] ORDER BY sno";
        else
            mysql = "SELECT*FROM [student] WHERE " + condstr + "ORDER BY sno";
        Session["sql"] = mysql;
        Response.Redirect("editstudent1.aspx");


    }

Answer 1

调试下 mysql = "SELECT*FROM [student] WHERE " + condstr + "ORDER BY sno";
这里，看你的sql拼接是否正确，比如说缺少符号或者空格