MS SQL Server 2008中的特殊字符插入

Question

Xyz's Goods Hospital @ St. Petersburg Division is stored in a string variable named _value. Now what will be the C# sting query to insert this value in a MS SQL table.

Answer 1

You could try:

using(SqlCommand cmd = new SqlCommand(
    "INSERT INTO your_table (field1) SELECT @val",
    dbconn)) 
{
    cmd.Parameters.Add("@val", your_string);
    try { cmd.ExecuteNonQuery(); }
    catch (Exception ex) { Debug.WriteLine(ex.Message); }
}

EDITED after OP comment:
If you have to insert in multiple columns you can use this different query:

"INSERT INTO your_table (field1, field2, field3) SELECT @val1, @val2, @val3"

and in code add and assign value to every query parameter .

Answer 2

Assign the value to the going into the database as HttpUtility.HtmlEncode(named _value);

and then while retrieving it use HttpUtility.HtmlDecode(value) . Even if you enter it directly it should insert it .. Could please be more specific what exactly do you want to achieve from this