我正在尝试在C#中运行查询,但它不起作用,尽管查询是正确的

Question

sqlQuery = "INSERT INTO community_market" +
           "VALUES (" + a.transaction_id + ",'" + a.community_name + "'," + 
                    a.community_id + ",'" + a.item_name + "'," +
                    a.item_quantity + "," + a.price + ");";

这是我试图运行的查询,我得到的错误是:

SqliteSyntaxException:near"1":语法错误Mono.Data.SqliteClient.SqliteCommand.GetNextStatement(IntPtr pzStart,System.IntPtr&pzTail,System.IntPtr&pStmt)Mono.Data.SqliteClient.SqliteCommand.ExecuteReader(CommandBehavior behavior,Boolean want_results,System. Int32和rows_affected)Mono.Data.SqliteClient.SqliteCommand.ExecuteReader(CommandBehavior behavior)Mono.Data.SqliteClient.SqliteCommand.ExecuteDbDataReader(CommandBehavior behavior)System.Data.Common.DbCommand.ExecuteReader()System.Data.Common.DbCommand.System. Data.IDbCommand.ExecuteReader()

可以使用一些帮助

Answer 1

我想你忘记了在之间的空间community_market和VALUES:

sqlQuery = "INSERT INTO community_market " +
"VALUES("+a.transaction_id+",'"+ a.community_name+"',"+ 
a.community_id+",'"+ a.item_name+"',"+ a.item_quantity+","+a.price+");";

此外,SQL注入可能有一些兴趣.