C#WinDOWS窗体中如何操作数据库进行模糊查询

Question

 

Answer 1

你应该先判断onecondition和twocondition有没有值在链接，要不sql出错

string onecondition=txtQueryCondition.Text.Trim().Replace("'","");//防注入替换掉单引号
string twocondition=cboFoodType.Text;
string sql="select * from food";
string cd="";
if(onecondition!="")cd=" where foodname like '%"+onecondition+"%'";
if(twocondition!="")cd+=(cd==""?" where ":" and ")+" typeid="+twocondition;
sql+=cd;//////////
//...后面的语句