Question

foreach($data as $newInfo) {
        $session = Yii::$app->session;
        $session->open();
        $session['nombre'] = $newInfo['nombre'];
        $session['email'] = $newInfo['email'];

上面的查询显示错误，因为它缺少分号。 string query = "Select * from getLabelDetails where itemlookupCode='"+S"';";如何为此查询传递单引号？

Answer 1

对查询的简单更正是：

string query = "Select * from getLabelDetails where itemlookupCode='" + S +"'";

但它会导致SQL Injection，我希望您使用parameterized query来避免SQL Injection。

您可以执行以下操作：

String sql = "Select * from getLabelDetails where itemlookupCode=@foo";
using (SqlConnection cn = new SqlConnection("Your connection string here")) 
   {
   using (SqlCommand cmd = new SqlCommand(sql, cn)) 
      {
        cmd.Parameters.Add("@foo", SqlDbType.VarChar, 50).Value = Baz;
        //execute command here
      }
   }

Answer 2

您需要将单引号加倍。您的每个单引号都需要另一个单引号。

Answer 3

你需要另一个报价。尝试：

string query = "Select * from getLabelDetails where itemlookupCode='" + S +"'";

从C＃6.0开始，您还可以尝试字符串插值：

string query = $"Select * from getLabelDetails where itemlookupCode='{S}';";

Answer 4

var s = "something";
string query = "Select * from getLabelDetails where itemlookupCode=\'"+ s +"\';";

通过查询显示错误传递单引号

4 个答案: