c#之Insert字符串的三种写法

1.Format

Format(String, Object)

将指定字符串中的一个或多个格式项替换为指定对象的字符串表示形式。

ex1：简单示例怎么应用

         private void btnTest_Click(object sender, EventArgs e)
         {
             string str = string.Format("您输入的信息为：{0}",txtTest.Text);
             MessageBox.Show(str);
         }

ex2：数据库命令字符串的两种写法

第一种：

    private void btnInsert_Click(object sender, EventArgs e)
    {
        string strcon = @"Data Source=LON;Initial Catalog=Practice;Integrated Security=True";
        SqlConnection conn = new SqlConnection(strcon);
        conn.Open();

        string strcmd = "insert into Info_Stu (Name,Age,Sex) values ('"+textBox1.Text+"','"+textBox2.Text+"','"+textBox3.Text+"')";
        SqlCommand cmd = new SqlCommand();
        cmd.CommandText = strcmd;
        cmd.CommandType = CommandType.Text;
        cmd.Connection = conn;
        cmd.ExecuteNonQuery();
    }

        

第二种：

    private void btnInsert_Click(object sender, EventArgs e)
    {
        string strcon = @"Data Source=LON;Initial Catalog=Practice;Integrated Security=True";
        SqlConnection conn = new SqlConnection(strcon);
        conn.Open();

        string strcmd = string.Format("insert into Info_Stu (Name,Age,Sex) values ('{0}','{1}','{2}')", textBox1.Text, textBox2.Text, textBox3.Text);
        SqlCommand cmd = new SqlCommand();
        cmd.CommandText = strcmd;
        cmd.CommandType = CommandType.Text;
        cmd.Connection = conn;
        cmd.ExecuteNonQuery();
    }

效果图同上，对比两条指令：

"insert into Info_Stu (Name,Age,Sex) values ('"+textBox1.Text+"','"+textBox2.Text+"','"+textBox3.Text+"')";

string strcmd = string.Format("insert into Info_Stu (Name,Age,Sex) values ('{0}','{1}','{2}')", textBox1.Text, textBox2.Text, textBox3.Text);

第三种：

     string connstr = @"Data Source=LON;Initial Catalog=PRACTICE;User ID=sa;Password=***";
     SqlConnection conn = new SqlConnection(connstr);
     conn.Open();

     string cmdstr = "insert into info_stu (name,age,sex) values (@name,@age,@sex)";
     SqlCommand cmd=new SqlCommand(cmdstr,conn);
     SqlParameter[] paras = new SqlParameter[]{new SqlParameter("@name",txtName.Text),
                                             new SqlParameter("@age",txtAge.Text),
                                             new SqlParameter("@sex",txtSex.Text)};
     cmd.Parameters.AddRange(paras);
     cmd.ExecuteNonQuery();

     string connstr = @"Data Source=LON;Initial Catalog=PRACTICE;User ID=sa;Password=****";
     SqlConnection conn = new SqlConnection(connstr);
     conn.Open();

     string cmdstr = "insert into info_stu (name,age,sex) values (@name,@age,@sex)";
     SqlCommand cmd = new SqlCommand();
     cmd.Connection = conn;
     cmd.CommandText = cmdstr;

     cmd.Parameters.Add("@name", txtName.Text);
     cmd.Parameters.Add("@age", txtAge.Text);
     cmd.Parameters.Add("@sex", txtSex.Text);

     cmd.ExecuteNonQuery();