菜鸟请教连接数据库问题

Question

protected void Button1_Click(object sender, EventArgs e)
    {
        if (TextBox1.Text != TextBox2.Text)
        {
            Response.Write("<script>alert('确认新密码要与密码相同！');parent.location.href='managemain.aspx';</script>");
            Response.End();
        }
        else
        {
            string ST_dns = ConfigurationSettings.AppSettings["connstr"];
            SqlConnection sqlconn = new SqlConnection(ST_dns);
            string sqlstring = "update　ST_SpAdmin　set　ST_SpAdmin_pass＝'" + TextBox1.Text.ToString() + "' where　ST_SpAdmin_name＝'" + Session["ST_name"] + "'";
            SqlCommand Command = new SqlCommand(sqlstring, sqlconn);
            sqlconn.Open();
            Command.ExecuteNonQuery();--------------' ' 附近有语法错误。
            sqlconn.Close();
            Response.Write("<script>alert('修改成功!');parent.location.href='managemain.aspx';</script>");
            Response.End();
        }
    }更新语句应该是没错，会哪里错啊

Answer 1

string sqlstring = "update　ST_SpAdmin　set　ST_SpAdmin_pass＝' " + TextBox1.Text.ToString() + " ' where　ST_SpAdmin_name＝'" + Session["ST_name"] + "'"; 
            SqlCommand Command = new SqlCommand(sqlstring
加上空格

Answer 2

你在sqlstring中那个where前面加个空格试试

Answer 3

string sqlstring = "update　ST_SpAdmin　set　ST_SpAdmin_pass＝'" + TextBox1.Text.ToString() + "' where　ST_SpAdmin_name＝'" + Session["ST_name"] + "'"; 
 
  第一，TextBox1.text 已经是string 类型啦，不用在后面再加.ToString()啦
  
  第二，Session["ST_name"]应该转换成ST_SpAdmin_name字段类型。应该是这方面的问题

Answer 4

我在sql server里查询一下 是这个更新语句有错 
谁帮我看看 要怎么改

Answer 5

不说了吗，试一下这个，应该是者的错的
string sqlstring = "update　ST_SpAdmin　set　ST_SpAdmin_pass＝'" + TextBox1.Text.ToString() + "' where　ST_SpAdmin_name＝'" + Session["ST_name"] + "'";   第一，TextBox1.text 已经是string 类型啦，不用在后面再加.ToString()啦 
  
  第二，Session["ST_name"]应该转换成ST_SpAdmin_name字段类型。应该是这方面的问题 
  
如果ST_SpAdmin_name是string类型的话，用Convert.ToString(Session["ST_name"])

Answer 6

update　ST_SpAdmin　set　ST_SpAdmin_pass＝'" + TextBox1.Text.ToString().Replace("'","") + "' where　ST_SpAdmin_name＝'" + Session["ST_name"].ToString().Replace("'","")  + "';
调试看看语句 

Answer 7

调试，把sqlstring打印出来瞧瞧 

Answer 8

sqlstring"update　ST_SpAdmin　set　ST_SpAdmin_pass＝'202745' where　ST_SpAdmin_name＝'super'"