sqlhelper问题

Question

        public int exe_insert_ddxx(string kh_ljid,string d_bdrq)
        {
            int val = 0;
            SqlParameter[] MyPara = new SqlParameter[2];
            //MyPara[0] = new SqlParameter("@kh_ljid", kh_ljid);
            //MyPara[1] = new SqlParameter("@d_bdrq", d_bdrq);
            try
            {
                object id = SqlHelper.ExecuteScalar(wl_const.connectionstring , CommandType.Text, "insert into ddxx(d_gsid,d_bdrq)values(1,'2008-1-1')", MyPara);
                id = id != null ? id : "";
                int.TryParse(id.ToString(), out val);
            }
            catch (Exception e)
            {
                throw e;
                val = 0;
            }
            return val;
        }上面那两句红的，怎么可有可无？搞不明白

Answer 1

我猜是insert into ddxx(d_gsid,d_bdrq)values(1,'2008-1-1')这里直接给值了，实际使用中可用参数给值。insert into ddxx(d_gsid,d_bdrq)values(@kh_ljid,@d_bdrq)

Answer 2

id = id != null ? id : "0";
SqlParameter是参数化
insert into ddxx(d_gsid,d_bdrq)values(@kh_ljid,@d_bdrq)

Answer 3

 //MyPara[0] = new SqlParameter("@kh_ljid", kh_ljid); 
//MyPara[1] = new SqlParameter("@d_bdrq", d_bdrq); Text, "insert into ddxx(d_gsid,d_bdrq)values(1,'2008-1-')此SQL中未使用MyPara