我無法將數據從註冊表單插入到sqlserver-2008中。我在VS中遇到錯誤:連接未關閉。連接的當前狀態已打開。插入記錄到sqlserver db
下面是我的代碼:
protected void buttonRegister(object sender, EventArgs e)
{
SqlConnection objCon = new SqlConnection(strCon);
try
{
objCon.ConnectionString = strCon;
objCon.Open();
}
catch (Exception ex)
{
this.lblConnect.Text = "Unable to connect to database.";
}
if (objCon.State == System.Data.ConnectionState.Open)
{
Session["users"] = this.txtUsername.Text;
Session["pwd"] = this.txtPassword.Text;
lblConnect.Text = "Connected";
string sql = @"INSERT INTO user (firstname, middlename, lastname, username, email, password) VALUES ('" + txtFirstname.Text
+ "' , '" + txtMiddlename.Text + "', '" + txtLastname.Text + "', '" + txtUsername.Text + "', '" + txtEmailAddr.Text
+ "', '" + txtPassword.Text + "')";
objCon.Open();
SqlCommand cmd = new SqlCommand(sql, objCon);
cmd.ExecuteNonQuery();
SqlDataReader rd = cmd.ExecuteReader();
objCon.Close();
objCon.Dispose();
}
else
{
lblConnect.Text = "Unable to connect to database.";
objCon.Close();
objCon.Dispose();
}
objCon.Close();
objCon.Dispose();
}
任何想法,爲什麼它不插入SQL Server的?請幫忙!任何幫助深表感謝。
嗨!如果你想在你的文章中包含源代碼,你應該縮進四個空格,所以它將被正確格式化。或者你可以選擇所有的代碼,然後點擊大括號中的按鈕:) – NikiC 2011-04-26 15:25:12
考慮使用表格適配器。您的代碼按原樣進行SQL注入。非常危險! – turtlepick 2011-04-26 15:32:46
@flaviotsf這看起來像copypasta給我。我想他只是想了解數據庫連接的工作原理。你絕對正確的重新:SQL注入,但他可能是最好的保持現在簡單,恕我直言。 – Matthew 2011-04-26 15:36:36