从VB多个位置更新SQL表

Question

我试图从VBA更新SQL表（使用以下代码），但似乎无法正确显示。 我想根据A，B，C，D，E的搜索条件来更新第一，第二，第三和第四列。在这里我怎么了？ 没有给出错误，但表只是不更新​​？ 谢谢

Sub UpdateData(A As String, B As String, C As String, D As String, E As String, one As Double, two As Double, three As Double, four As Double)

Dim sA As String, sB As String, sC As String, sD As String, sDesk As String, sE As String
Dim sone As Double, stwo As Double, sthree As Double, sfour As Double

Dim objConn As ADODB.Connection
Set objConn = New ADODB.Connection
objConn.ConnectionString = "Provider=SQLOLEDB;Data Source=source;Initial Catalog=Model_table;Integrated Security=SSPI"
objConn.Open
Set objRec = New ADODB.Recordset


Date = Format(Range("date").Value, "YYYY-MM-DD")
sA = A
sB = B
sC = C
sD = D
sE = E
sone = one
stwo = two
sthree = three
sfour = four
     StrSQL = "UPDATE pnl_results SET (" & sone & "," & stwo & "," & sthree & "," & sfour & ") Where  ('" & date =  sDate & "', '" & AA= sA & _
              "','" & BB= sB & "','" CC= & sC & "','" & DD= sD & "','" & EE=sE & ")"
     Set objRec = objConn.Execute(StrSQL)

objConn.Close
Set objConn = Nothing

End Sub

Answer 1

您的代码中有几个错误：

• 您不需要括号。
• 将列名称直接放在字符串中，不要用撇号将其引起来。
• 所有字符串值都用撇号引起来。
• 使用AND或OR运算符组合不同的条件，而不是逗号。

尝试这个：

StrSQL = "UPDATE pnl_results SET " & _
         " one = '" & sone & _
         "', two = '" & stwo & _
         "', three = '" & sthree & _
         "', four = '" & sfour & _
         "' Where date = '" & sDate & _
         "' AND AA = '" & sA & _
         "' AND BB = '" & sB & _
         "' AND CC = '" & sC & _
         "' AND DD = '" & sD & _
         "' AND EE = '" & sE & "'"

如注释中所述，将内联查询与直接来自用户输入的值一起使用会使代码对SQL注入攻击开放。 在查询中使用用户输入之前先对其进行验证，或者最好使用参数化查询。

Answer 2

您在Update和Insert Into之间混淆了语法。 它看起来应该像这样：

StrSQL = "UPDATE pnl_results SET field1='value1', field2='value2' WHERE field3='value3' AND field4='value4'