动态参数化查询
動態參數化查詢
List<SqlParameter> list = new List<SqlParameter>();
??????? string sql = "select * from sys_menu where 1=1";
??????? string id = "";
??????? string path = "0,1,";
??????? if (!string.IsNullOrEmpty(id))
??????? {
??????????? sql += " and charindex(',' + rtrim(id) + ',' , ',' + @id + ',')>0";
??????????? list.Add(new SqlParameter("@id", id));
??????? }
??????? if (!string.IsNullOrEmpty(path))
??????? {
??????????? sql += " and path like @path";
??????????? list.Add(new SqlParameter("@path", "%"+@path+"%"));
??????? }
??????? SqlParameter[] Parameters = list.ToArray();
??????? DataTable dt = SqlHelper.ExecuteDataTable(sql, Parameters);
轉載于:https://www.cnblogs.com/homexigua/p/3385744.html
總結
- 上一篇: 微信小程序自带地图_微信小程序地图上选择
- 下一篇: 一个测试工程师面试官的真实分享!个人超赞