如何使用C＃在mysqlcommand中使用通配符％

Question

Please help me guys, my professor has done this before but I forgot how. And if possible I need it right now. How do I use the wildcard % in this code? Thanks in advance!!

MySqlCommand SelectCommand = new MySqlCommand("select * from sms.members where memberFName +' '+ memberLName like'" +cmbmemsched.Text+ "';", myconn);

Answer 1

You'd better use parameterized queries to avoid SQL injection:

MySqlCommand selectCommand = new MySqlCommand(
    "SELECT * FROM sms.members WHERE memberFName LIKE @memberFName;", 
    myconn
);
selectCommand.Parameters.AddWithValue(@memberFName, "%" + cmbmemsched.Text + "%");

In this example, the LIKE statement will look for the search phrase anywhere in the middle of the value. If you want to look for records that start with or end with the specified filter you will need to adapt the % in the parameter.

I'd also more than strongly recommend you wrapping your IDisposable resources such as SQL commands in using statement to ensure that they are properly disposed even if some exceptions are thrown:

using (MySqlCommand selectCommand = new MySqlCommand("SELECT * FROM sms.members WHERE memberFName LIKE @memberFName;", myconn))
{
    selectCommand.Parameters.AddWithValue(@memberFName, "%" + cmbmemsched.Text + "%");
}