如何在ASP.NET中获取查询字符串变量并将其作为Sql参数传递

Question

string userid = Request.QueryString[0].ToString();
string Qid = Request.QueryString[1].ToString();
string connection = ConfigurationManager.ConnectionStrings["dbconnection"].ConnectionString.ToString();
SqlConnection con = new SqlConnection(connection);
con.Open();
SqlCommand com = new SqlCommand("qualification", con);
com.Parameters.Add("@proctype",SqlDbType.Int).Value = 4;
com.Parameters.Add("@Qid", SqlDbType.Int).Value = Qid;
SqlDataReader reader = com.ExecuteReader();
while (reader.Read())
{
   drpqualification.SelectedItem.Text = reader["Qualification"].ToString();
   txtSubjects.Text = reader["Subject"].ToString();
   txtmarksobt.Text = reader["MarksObtained"].ToString();
   txtgrade.Text = reader["Percentage"].ToString();
   txtboard.Text = reader["BoardUniversity"].ToString();
}
reader.Close();
con.Close();
}

• 这里是URL：http://localhost:35689/Academic_info.aspx?userid=94&Qid=14我只想获取Qid并将其作为Sql参数传递*

Answer 1

您应该将值添加到参数中，如下所示-

    command.Parameters.Add("@ID", SqlDbType.Int);
    command.Parameters["@ID"].Value = customerID;
    // Use AddWithValue to assign Demographics. 
    // SQL Server will implicitly convert strings into XML.
    command.Parameters.AddWithValue("@demographics", demoXml);

检查此URL-https://msdn.microsoft.com/en-us/library/system.data.sqlclient.sqlcommand.parameters(v=vs.110(.aspx

要获取查询字符串，只需使用Request.QueryString["Qid"]。您不需要.ToString()。