C＃插入查询不起作用

Question

i have written insert query for my application to create new user with password, but its not working, please check and correct it.

 con.Open();
        string a;
        a = "insert into tbl_KKSUser(EName,Uname,Password)values(@en,@un,@pas)";
        SqlCommand cm = new SqlCommand(a, con);
        SqlParameter paramName;
        paramName = new SqlParameter("@en", SqlDbType.VarChar, 25);
        paramName.Value = DropDownList1.SelectedItem.Text;
        cm.Parameters.Add(paramName);

        string original = TextBox2.Text.Trim();
        int h = original.GetHashCode();
        string withHash = original;
        b1 = Encoding.BigEndianUnicode.GetBytes(withHash);
        encrypted = Convert.ToBase64String(b1);
        SqlParameter paramPass;
        paramPass = new SqlParameter("@pas", SqlDbType.VarChar, 300);
        paramPass.Value = Convert.ToString(encrypted);
        cm.Parameters.Add(paramPass);
        Response.Write("<script>alert('inserted')</alert>");
        con.Close();

Answer 1

You are not executing the query. You need to do:

cm.ExecuteNonQuery();

Answer 2

You must call ExecuteNonQuery function before closing connection

 con.Open();
            string a;
            a = "insert into tbl_KKSUser(EName,Uname,Password)values(@en,@un,@pas)";
            SqlCommand cm = new SqlCommand(a, con);
            SqlParameter paramName;
            paramName = new SqlParameter("@en", SqlDbType.VarChar, 25);
            paramName.Value = DropDownList1.SelectedItem.Text;
            cm.Parameters.Add(paramName);

            string original = TextBox2.Text.Trim();
            int h = original.GetHashCode();
            string withHash = original;
            b1 = Encoding.BigEndianUnicode.GetBytes(withHash);
            encrypted = Convert.ToBase64String(b1);
            SqlParameter paramPass;
            paramPass = new SqlParameter("@pas", SqlDbType.VarChar, 300);
            paramPass.Value = Convert.ToString(encrypted);
            cm.Parameters.Add(paramPass);

            cm.ExecuteNonQuery(); // here call ExecuteNonQuery

            Response.Write("<script>alert('inserted')</alert>");
            con.Close();

Answer 3

Two things are missing there....

1. You are passing 3 sql variables in the query and adding only two parameters.

2. add the following line too,

    cm.ExecuteNonQuery(); 

Answer 4

The ExecuteNonQuery() is one of the most frequently used method in SqlCommand Object, and is used for executing statements that do not return result sets (ie. statements like insert data , update data etc.)

so use

cm.ExecuteNonQuery();

And also add all used parameters ie 3 parameters in your example.