在Updata语句中使用参数

protected void Button2_Click(object sender, EventArgs e) { var cn = new SqlConnection(); cn.ConnectionString = @"Data Source=./SQLEXPRESS;AttachDbFilename=|DataDirectory|Student.Mdf;Integrated Security=True;User Instance=True"; var cmd = new SqlCommand(); cmd.Connection = cn; cmd.CommandText = " update Student set StudentName = @StudentName where StudentID = @StudentID "; cmd.Parameters.AddWithValue("@StudentID",TextBox1.Text); cmd.Parameters.AddWithValue("@StudentName",TextBox2.Text); cn.Open(); var records = cmd.ExecuteNonQuery(); cn.Close(); }