有HTML标签的文本,在插入数据库时,SQL语句怎么写?

发布网友

我来回答

共3个回答

热心网友

values(\"" + b + "\",\"" + content + "\")";
→
values("'\" + b + "\'","'\" + content + "\'")";

不知道你的[\]是干嘛用的(转译字符？)，先这样试试，如果哦[\]没有实际的意义，删掉再试试

***补充：如果sql是正确的楼上的参数执行方式可以解决问题**

--
以上，希望对你有所帮助。

热心网友

values('"+ b + "','" + content + "')";

热心网友

用参数执行方式
string content = Request.Form["content1"].ToString().Trim();
string b = Request.Form["txtUserName"].ToString().Trim();
string dbpath = System.Configuration.ConfigurationSettings.AppSettings["dbpath"];
OleDbConnection conn = new OleDbConnection("Provider=Microsoft.jet.OLEDB.4.0;Data source=" + Server.MapPath(dbpath));
string ins = "insert into gonggao(biaoti,neirong) values(@biaoti,@neirong)";
OleDbCommand comm = new OleDbCommand();
OleDbParameter biaoti = new OleDbParameter("@biaoti", OleDbType.VarChar);
biaoti.Value = "你的标题";
OleDbParameter neirong = new OleDbParameter("@neirong", OleDbType.VarChar);
neirong.Value = "你的内容";
comm.CommandText = ins;
comm.Connection = conn;
comm.Parameters.Add(biaoti);
comm.Parameters.Add(neirong);

try
{
conn.Open();//晚点打开连接，打开早了影响性能
comm.ExecuteNonQuery();
Response.Write("<script>alert('添加成功!');</script>");
Response.Write("<script>location.replace('gonggao.aspx');</script>");
}
catch (OleDbException ex)
{
Response.Write("添加失败！" + ex.Message);
}
finally
{
comm.Connection.Close();
comm.Dispose();
}