System.Data.SqlClient.SqlException：'')' 附近的语法不正确。' 有什么建议吗？

Question

这是我的第一篇文章，这个问题确实持续存在，我的代码遇到了这个问题，当我尝试单击“发布评论”按钮时它会中断。

public partial class add_review : System.Web.UI.Page
{
    protected void btnSub_Click(object sender, EventArgs e)
    {
        String myConStr = System.Configuration.ConfigurationManager.ConnectionStrings["myDBCon"].ConnectionString;

        using (SqlConnection myCon = new SqlConnection(myConStr))
        {
            string mySQL = "INSERT INTO Reviews (rTitle, rDate";

            mySQL += "rAuthor, rStar, rFull,) ";
            mySQL += "VALUES (@rTitle, @rDate, @rAuthor, rStar ";
            mySQL += "  @rFull, GETDATE())  ";

            using (SqlCommand myCom = new SqlCommand(mySQL,myCon))
            {
                myCom.Parameters.AddWithValue("@rTitle", txtTitle.Text);
                myCom.Parameters.AddWithValue("@rDate", txtDate.Text);
                myCom.Parameters.AddWithValue("@rAuthor", txtAuthor.Text);
                myCom.Parameters.AddWithValue("@rStar", txtStar.Text);
                myCom.Parameters.AddWithValue("@rFull", txtFull.Text);

                myCon.Open();
                myCom.ExecuteNonQuery();
            }
        }

        pnlForm.Visible = false;
        pnlThanks.Visible = true;
        String myOut = "<p>Thank you for your submission; remember to double check your grammar!</p>";
        myOut += "<h2>" + txtTitle.Text + "</h2>";
        myOut += "<span class='rDate'>" + txtDate.Text + "</span> by <strong>";
        myOut += txtAuthor.Text + "</strong><br/>";
        myOut += txtFull.Text + "</div>";

        lblOut.Text = myOut;
    }
}

我试图准确地指出它是什么，但我找不到任何东西，我想知道我是否正在寻找一些简单的东西？ 太感谢了。

Answer 1

string mySQL = "INSERT INTO Reviews (rTitle, rDate";
mySQL += "rAuthor, rStar, rFull,) ";
mySQL += "VALUES (@rTitle, @rDate, @rAuthor, rStar ";
mySQL += "  @rFull, GETDATE())  ";

尝试

string mySQL = "INSERT INTO Reviews (rTitle, rDate, rAuthor, rStar, rFull) ";
mySQL += "VALUES (@rTitle, @rDate, @rAuthor, @rStar, @rFull) ";

Answer 2

美好的一天，我注意到您声明了这样的命令字符串：

string mySQL = "INSERT INTO Reviews (rTitle, rDate";

您需要在rDate或rAuthor之前的字符串完成之前放置一个, 。 因此，要么将声明行更改为string mySQL = "INSERT INTO Reviews (rTitle, rDate,";要么将语句行完成

mySQL += ", rAuthor, rStar, rFull,) ";

您还需要更改此行

mySQL += "VALUES (@rTitle, @rDate, @rAuthor, rStar ";

至

mySQL += "VALUES (@rTitle, @rDate, @rAuthor, @rStar, ";

Answer 3

像这样在 C# 中嵌入 static SQL ：

            string mySQL = @"
INSERT INTO Reviews (rTitle,  rDate,  rAuthor,  rStar,  rFull) 
             VALUES (@rTitle, @rDate, @rAuthor, @rStar, @rFull);
";