解决了,我原来是拼sql的,现在改回用参数形式的,就可以存和读了,但是为什么拼sql就有问题呢?
原来的代码:
public static int AddEntity(string name, string company, string job, byte[] photo)
{
string sql = string.Format("insert into PersonInfo values('{0}','{1}','{2}','{3}')",name,company,job,photo);
return DatabaseUtility.ExecuteCommand(sql);
}现在的代码:
public static int AddEntity(string name, string company, string job, byte[] photo)
{
string sql = @"insert into PersonInfo values(@pname,@company,@job,@photo)";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@pname", name),
new SqlParameter("@company", company),
new SqlParameter("@job", job),
new SqlParameter("@photo", photo)
};
return DatabaseUtility.ExecuteCommand(sql,para);
}
原来的代码:
public static int AddEntity(string name, string company, string job, byte[] photo)
{
string sql = string.Format("insert into PersonInfo values('{0}','{1}','{2}','{3}')",name,company,job,photo);
return DatabaseUtility.ExecuteCommand(sql);
}现在的代码:
public static int AddEntity(string name, string company, string job, byte[] photo)
{
string sql = @"insert into PersonInfo values(@pname,@company,@job,@photo)";
SqlParameter[] para = new SqlParameter[]
{
new SqlParameter("@pname", name),
new SqlParameter("@company", company),
new SqlParameter("@job", job),
new SqlParameter("@photo", photo)
};
return DatabaseUtility.ExecuteCommand(sql,para);
}
解决方案 »
免费领取超大流量手机卡,每月29元包185G流量+100分钟通话, 中国电信官方发货