Home > Net >  Class encapsulates a database operation, if a class contains multiple SQL statements, the Parameters
Class encapsulates a database operation, if a class contains multiple SQL statements, the Parameters

Time:01-25

Practice wrapper class found difficult points:
To avoid SQL injection attacks, for SQL reference, if no problem, is only a single SQL statement directly add a Parameters SQLParameter [] as a placeholder,
But if it is a multiple SQL, each SQL should have different parameter, that how to add the Parameters? Placeholder only allows a Parameters, in the end,
Don't know if I have to say,
Please the teachers give directions,

  •  Tags:  
  • C#
  • Related