我有這樣的代碼:將數據插入SQL數據庫使用ASP.NET/VB.NET
Dim myConn As SqlConnection
Dim cmd As SqlCommand
Dim sqlstring, DNAME, DEXP, DCREATION, DLASTUPDATE, DCOMMENTS As String
DNAME = TextBox1.Text
DEXP = TextBox2.Text
DCREATION = TextBox3.Text
DLASTUPDATE = TextBox4.Text
DCOMMENTS = TextBox5.Text
myConn = New SqlConnection("Integrated Security=SSPI;Data Source=.;Initial Catalog=DOMAIN_NAME;User ID=sa;Password=***********")
myConn.Open()
sqlstring = " INSERT INTO ROLAND (D_NAME, D_EXPIRATION, D_CREATION, D_LASTUPDATE,D_COMMENTS) VALUES ('" + DNAME + "','" + DEXP + "','" + DCREATION + "','" + DLASTUPDATE + "','" + DCOMMENTS + "')"
cmd = New SqlCommand(sqlstring, myConn)
cmd.ExecuteNonQuery()
myConn.Close()
Response.Redirect(Request.RawUrl, True)
當我執行,它給了我這個錯誤:
Cannot open database "DOMAIN_NAME" requested by the login. The login failed.
Login failed for user 'comm-pc10\pcuser10.comm'.
,並突出的myconn .Open()
這裏有什麼問題,有什麼幫助嗎?我有SQLServer 2008和一個用戶名和通行證我的數據庫
無需喊。 –
我建議你弄清楚如何在VB中做參數化查詢。像你一樣連接插入語句會讓你爲SQL注入開放。 http://littlebobbytables.com/ –
更糟的是,他使用SA帳戶 – okrumnow