日期和时间查询表达式中缺少运算符的语法错误

Question

cmd.CommandText = "SELECT * FROM " + TableName + " WHERE"
                                                + " [TIME_STAMP]=#" + TimeStamp.ToString("dd-MM-yyyy HH:mm") + "#"
                                                + " AND [Slave_Id]='" + SlaveUnitID
                                                + " AND [Parameter]='" + Param
                                                + "' AND [Status]='" + Status
                                                + "' AND [Reading]='" + Reading + "'";
                                dr = cmd.ExecuteReader();

I am getting error in the above query.Tried but getting the same, Plz help it out

Answer 1

Try to use parameterized query

conn.Open();
string query = "SELECT * FROM " + TableName + " WHERE [TIME_STAMP] =@date "
+" AND [Slave_Id]=@sid AND [Parameter] =@param  "
+" AND [Status] =@status AND [Reading] = @reading"
qlCommand cmd = new SqlCommand(query,conn);
cmd.Parameters.AddWithValue("@date", TimeStamp);
cmd.Parameters.AddWithValue("@sid", SlaveUnitID);
cmd.Parameters.AddWithValue("@param", Param);
cmd.Parameters.AddWithValue("@status", Status);
cmd.Parameters.AddWithValue("@reading", Reading );
dr = cmd.ExecuteReader();