日期和時間查詢表達式中缺少運算符的語法錯誤

Question

cmd.CommandText = "SELECT * FROM " + TableName + " WHERE"
                                                + " [TIME_STAMP]=#" + TimeStamp.ToString("dd-MM-yyyy HH:mm") + "#"
                                                + " AND [Slave_Id]='" + SlaveUnitID
                                                + " AND [Parameter]='" + Param
                                                + "' AND [Status]='" + Status
                                                + "' AND [Reading]='" + Reading + "'";
                                dr = cmd.ExecuteReader();

我在上面的查詢中遇到錯誤。嘗試過但得到相同的結果，請幫忙解決

Answer 1

嘗試使用參數化查詢

conn.Open();
string query = "SELECT * FROM " + TableName + " WHERE [TIME_STAMP] =@date "
+" AND [Slave_Id]=@sid AND [Parameter] =@param  "
+" AND [Status] =@status AND [Reading] = @reading"
qlCommand cmd = new SqlCommand(query,conn);
cmd.Parameters.AddWithValue("@date", TimeStamp);
cmd.Parameters.AddWithValue("@sid", SlaveUnitID);
cmd.Parameters.AddWithValue("@param", Param);
cmd.Parameters.AddWithValue("@status", Status);
cmd.Parameters.AddWithValue("@reading", Reading );
dr = cmd.ExecuteReader();