Access怎么用OleDbParameter更新和插入数据

使用OleDbParameter对象可以通过参数化查询来更新和插入数据。

更新数据示例：

using (OleDbConnection connection = new OleDbConnection(connectionString))
{
    connection.Open();

    string query = "UPDATE [TableName] SET [Column1] = ?, [Column2] = ? WHERE [ID] = ?";

    using (OleDbCommand command = new OleDbCommand(query, connection))
    {
        command.Parameters.AddWithValue("@Column1Value", newValue1);
        command.Parameters.AddWithValue("@Column2Value", newValue2);
        command.Parameters.AddWithValue("@IDValue", id);

        command.ExecuteNonQuery();
    }
}

插入数据示例：

using (OleDbConnection connection = new OleDbConnection(connectionString))
{
    connection.Open();

    string query = "INSERT INTO [TableName] ([Column1], [Column2]) VALUES (?, ?)";

    using (OleDbCommand command = new OleDbCommand(query, connection))
    {
        command.Parameters.AddWithValue("@Column1Value", value1);
        command.Parameters.AddWithValue("@Column2Value", value2);

        command.ExecuteNonQuery();
    }
}

在示例中，connectionString是连接字符串，TableName是表名，Column1和Column2是要更新或插入的列名，@Column1Value、@Column2Value和@IDValue是参数名称，newValue1、newValue2、id、value1和value2是参数的值。通过添加参数并为其指定值，可以实现参数化查询，从而防止SQL注入攻击，并提高查询的性能和安全性。