使用参数时mysql语法错误

Question

我一直听说当我使用参数时，在我的mysql语法中有错误。

这里是我的代码：

Dim db As New Database 

    Dim sql As String = "select firstname, password from users where email = :email" 

    Dim args As New List(Of MySqlParameter) 
    args.Add(New MySqlParameter(":email", txtEmail.Text)) 

    ' execDB(procedurename As String, proceduretype As String, parameters() as MySqlParameter, returntype As String, newconnection As Boolean) 

    Dim dr As MySqlDataReader = db.execDB(sql, "Text", args.ToArray, "DataReader", False) 

的错误指出:email不是有效的值。我不明白为什么它不使用参数，因为我将它传递给execDB函数。

在此先感谢您的帮助。

Answer 1

使用?paramsyntax，

Dim sql As String = "select firstname, password from users where email = ?email"