怎么执行存储过程,求赐教

Question

{
//SQL注入式攻击
try
{
SqlDataAdapter da = new SqlDataAdapter(sql, connString);
if (para != null)
{
da.SelectCommand.CommandType=type;
da.SelectCommand.Parameters.AddRange(para);
}
DataTable dt = new DataTable();
da.Fill(dt);
return dt;
}
catch (Exception)
----------------------------------
SqlParameter[] para ={
new SqlParameter("@pageIndex",1),
new SqlParameter("@pageSize",5)
};
DataTable dt = DBHelper.ExecuteSelect(CommandType.StoredProcedure, "pro_User", para);
一直提示存储过程参数为赋值.

Answer 1

//创建存储过程的对象

CallableStatement c = conn.prepareCall("{call pro_User(?,?)}");
//添加参数
c.setString(1, 1);
c.setString(1, 5);
//执行存储过程
ResulSet rs = c.executeQuery();