查询表达式中的语法错误（逗号）？

Question

Sooo 我目前正在编写关于某些图书馆系统的第二年项目。 只是想快速询问是否有人可以快速回答这个问题。 在我的一部分代码中，在我的btnUpdate_Click下，显然可以更新 Books 表中书籍的信息。 我在执行程序时收到一条错误消息，其中显示Syntax error (comma) in query expression 。 这是我的代码：

Imports System.Data.OleDb
Public Class BookDetails
Dim conn As OleDbConnection = New OleDbConnection("Provider=Microsoft.ACE.OLEDB.12.0;Data Source=C:\\Users\\msi\\Desktop\\UITM\\DIPLOMA CS110\\SEM 3\\CSC301\\groupproject\\ReadObrite\\ReadObrite\\User.accdb")
Dim dt As New DataTable
Dim cmd As New OleDbCommand
Dim da As New OleDbDataAdapter(cmd)

    Public Sub view()
        conn.Open()
        cmd.CommandType = CommandType.Text
        da = New OleDbDataAdapter("Select * from Books ", conn)
        da.Fill(dt)
        DataGridView1.DataSource = dt
        conn.Close()
    End Sub
    
    Private Sub BookDetails_Load(sender As Object, e As EventArgs) Handles MyBase.Load
        'TODO: This line of code loads data into the 'UserDataSet.Books' table. You can move, or remove it, as needed.
        Me.BooksTableAdapter.Fill(Me.UserDataSet.Books)
        conn.Open()
        cmd.CommandType = CommandType.Text
        da = New OleDbDataAdapter("Select * from Books ", conn)
        da.Fill(dt)
        DataGridView1.DataSource = dt
        conn.Close()
    End Sub
    
    Private Sub btnUpdate_Click(sender As Object, e As EventArgs) Handles btnUpdate.Click
        cmd = conn.CreateCommand()
        conn.Open()
        cmd.CommandType = CommandType.Text
        cmd.CommandText = "Update Books set ISBN = '" + TextBox12.Text + "' where Ttile = '" + TextBox11.Text + "', Author = '" + TextBox10.Text + "', Production = '" + TextBox9.Text + "', Category = '" + TextBox8.Text + "' and Year = '" + TextBox7.Text + "'"
        cmd.ExecuteNonQuery()
        conn.Close()
        btnSearch_Click(New Object, New EventArgs())
        view()
    End Sub
    
    Private Sub btnDelete_Click(sender As Object, e As EventArgs) Handles btnDelete.Click
        Me.BooksBindingSource.RemoveCurrent()
    End Sub
    
    Private Sub btnAdd_Click(sender As Object, e As EventArgs) Handles btnAdd.Click
        cmd = conn.CreateCommand()
        conn.Open()
        cmd.CommandType = CommandType.Text
        cmd.CommandText = "Insert into Books values('" + TextBox1.Text + "','" + TextBox2.Text + "','" + TextBox3.Text + "','" + TextBox4.Text + "','" + TextBox5.Text + "','" + TextBox6.Text + "')"
        cmd.ExecuteNonQuery()
        MsgBox("New book is added")
        TextBox1.Clear()
        TextBox2.Clear()
        TextBox3.Clear()
        TextBox4.Clear()
        TextBox5.Clear()
        TextBox6.Clear()
        conn.Close()
        conn.Open()
        cmd.CommandType = CommandType.Text
        da = New OleDbDataAdapter("Select * from Books ", conn)
        da.Fill(dt)
        DataGridView1.DataSource = dt
        conn.Close()
    End Sub
    
    Private Sub btnClear_Click(sender As Object, e As EventArgs) Handles btnClear.Click
        TextBox1.Clear()
        TextBox2.Clear()
        TextBox3.Clear()
        TextBox4.Clear()
        TextBox5.Clear()
        TextBox6.Clear()
    End Sub
    
    Private Sub btnExit_Click(sender As Object, e As EventArgs) Handles btnExit.Click
        Me.Close()
    End Sub
    
    Private Sub DataGridView1_CellClick(sender As Object, e As DataGridViewCellEventArgs) Handles DataGridView1.CellClick
        TextBox12.Text = DataGridView1.SelectedRows(0).Cells(0).Value.ToString()
        TextBox11.Text = DataGridView1.SelectedRows(0).Cells(1).Value.ToString()
        TextBox10.Text = DataGridView1.SelectedRows(0).Cells(2).Value.ToString()
        TextBox9.Text = DataGridView1.SelectedRows(0).Cells(3).Value.ToString()
        TextBox8.Text = DataGridView1.SelectedRows(0).Cells(4).Value.ToString()
        TextBox7.Text = DataGridView1.SelectedRows(0).Cells(5).Value.ToString()
    End Sub
    
    Private Sub refresh()
        If txtSearch.Text = "" Then
            view()
        End If
    End Sub
    
    Private Sub btnSearch_Click(sender As Object, e As EventArgs) Handles btnSearch.Click
        cmd = conn.CreateCommand()
        conn.Open()
        cmd.CommandType = CommandType.Text
        cmd.CommandText = "Select * From Books Where ISBN = '" + txtSearch.Text + "' or Title = '" + txtSearch.Text + "' "
        cmd.ExecuteNonQuery()
        da = New OleDbDataAdapter(cmd)
        dt = New DataTable
        da.Fill(dt)
        DataGridView1.DataSource = dt
        conn.Close()
        refresh()
    End Sub

End Class

我尝试将所有逗号更改为“和”。 但随后发生了新的错误。

Answer 1

尝试这个：

cmd.CommandText = "Update Books set ISBN = '" + TextBox12.Text + "' WHERE Ttile = '" + TextBox11.Text + "' AND Author = '" + TextBox10.Text + "' AND Production = '" + TextBox9.Text + "' AND Category = '" + TextBox8.Text + "' AND [Year] = '" + TextBox7.Text + "'"

笔记：

• Year 是一个 SQL 受保护的名称，所以用 [] 括起来
• 所有 SQL 偏角都不支持逗号
• 正如 IFrank 所提到的，“Ttile”列名中可能有错误 - 可能会抛出无效的列名错误消息
• 小心控制文本内容：使用 TextBoxXX.Text.replace("'","'") 清除它们或使用参数化查询