在预期条件的上下文中指定的非布尔类型的表达式，在'and'附近

我已将数据库从Access转换为Sql，因为Sql不接受format()因此显示错误。在预期条件的上下文中指定的非布尔类型的表达式，在'and'附近

这是我的代码：

DefaultStr = "" & 
"SELECT StudentAccount.Dated, StudentAccountS.StAdmNo, StudentAccountS.StClass, " & 
"StudentAccountS.StName, StudentAccount.Perticular, StudentAccount.Amount,StudentAccount.Remark,StudentAccount.PayMode,TransactionID " & 
"FROM (StudentAccount LEFT OUTER JOIN StudentAccountS ON StudentAccount.SSID = StudentAccountS.SSID) " & 
"WHERE (StudentAccount.Debit) and (StudentAccount.Dated Between " & 
"#" & Format(DateFrom, "MM/dd/yyyy") & "# AND #" & Format(DateTo, "MM/dd/yyyy") & "#)" 


Select Case SIndex 
    Case 0 
     SelStr = " AND (StudentAccount.PayMode = '" & OptionStr & "') Order By StudentAccount.Dated" 
    Case 1 
     SelStr = " AND (StudentAccount.Perticular = '" & OptionStr & "') Order By StudentAccount.Dated" 
    Case 2, 3 
     SelStr = " AND (StudentAccount.TransType = '" & filterStr & "') Order By StudentAccount.Dated" 
    Case Else 
     SelStr = Nothing 
End Select 

Da = New SqlDataAdapter(DefaultStr & SelStr, Conn) 
Ds = New DataSet 
Da.Fill(Ds)

来源

2015-09-06 Ankit

在'mssql'，当你存储'date'（或'datetime'）值不使用''＃（像'Access'），但单引号。什么是DateTo和DateFrom变量？如果他们然后使用这样的东西：''“＆String.Format（”{0：MM/dd/yyyy}“，DateTo）＆”'' – nelek

我还会补充说，你不应该使用字符串连接sql命令。使用参数化的sql。看到这个http://stackoverflow.com/questions/306668/are-parameters-really-enough-to-prevent-sql-injections – chrisl08

这也抛出相同的错误 – Ankit

你必须使用这样的事情：

Dim CMD As SqlClient.SqlCommand = Conn.CreateCommand 
Dim dtStart As DateTime = New DateTime(2015, 9, 6, 10, 1, 0) 
Dim dtEnd As DateTime = New DateTime(2015, 9, 6, 11, 0, 0) 

CMD.CommandText = "SELECT * FROM Table1 WHERE Date BETWEEN '" & dtStart.ToString("yyyy-MM-dd HH:mm:ss") & "' AND '" & _ 
       dtEnd.ToString("yyyy-MM-dd HH:mm:ss") & "'" 
Dim DA As New SqlClient.SqlDataAdapter 
DA.SelectCommand = CMD 
Dim DT As New DataTable 
DA.Fill(DT)

Howewer我建议你开始性学习的SqlParameter的查询（即是更可靠，为例如在处理SQL注入）。只需使用类似的东西：

CMD.Parameters.Add("@DateStart", SqlDbType.DateTime2, 20).Value = dtStart 
CMD.Parameters.Add("@DateEnd", SqlDbType.DateTime2, 20).Value = dtEnd 
CMD.CommandText = "SELECT * FROM Table1 WHERE Date BETWEEN @DateStart AND @DateEnd"

来源

2015-09-06 10:15:18 Raffaello

在预期条件的上下文中指定的非布尔类型的表达式，在'and'附近

回答

相关问题