Oracle 中参数化SQL 语句 写法

 

OleDbParameter [] opGroup={new OleDbParameter(":sELEMENT_VALUE",OleDbType.VarChar),new OleDbParameter(":sFACTORY_ID",OleDbType.Integer), new OleDbParameter(":sPART_NO",OleDbType.VarChar),new OleDbParameter(":sELEMENT_ID",OleDbType.Integer) };

opGroup[0].Value=ELEMENT_VALUE;

opGroup[1].Value=Convert.ToInt32(FACTORY_ID);

opGroup[2].Value=PART_NO;

opGroup[3].Value=Convert.ToInt32(ELEMENT_ID);

 

sql =" UPDATE table SET ELEMENT_VALUE =:sELEMENT_VALUE WHERE FACTORY_ID =:sFACTORY_ID AND PART_NO =:sPART_NO AND ELEMENT_ID =:sELEMENT_ID ";

 

 

string connString = GetConnectionString();

OleDbConnection connection = new OleDbConnection(connString);

 

connection.Open();

 

OleDbCommand cmd = new OleDbCommand(commandText,connection);

 

foreach(OleDbParameter parm in parms)

{

cmd.Parameters.Add(parm);

}

 

cmd.ExecuteNonQuery();

 

connection.Close();