c# - Mysql语法错误

Question

我收到以下错误，但找不到问题所在:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''String', 'String', '6', 'String', 'String', 'String', 'The' at line 1

C#代码:

    protected void updateDB(byte[] content, int size, string mime)
{
    string school = DropDownList_School.Text;
    string subject = DropDownList_Subject.Text;
    string teacher = DropDownList_Teacher.Text;
    string course = DropDownList_Class.Text;
    string unit = TextBox_Unit.Text;
    string name = TextBox_Name.Text;
    string date = DateTime.Today.ToString();
    string username = System.Web.Security.Membership.GetUser().UserName;
    MySqlConnection connection = new MySqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings["MySqlConnection"].ConnectionString);
    connection.Open();
    MySqlCommand cmd = new MySqlCommand();//(query, connection);
    cmd.Connection = connection;
    cmd.CommandText = "INSERT INTO uploads 
                       (@School, @Subject, @Teacher, @Course, @Unit, @Name, @Username, @Size, @MIME, @content) ";
    cmd.Prepare();
    cmd.Parameters.AddWithValue("@School", school);
    cmd.Parameters.AddWithValue("@Subject", subject);
    cmd.Parameters.AddWithValue("@Teacher", teacher);
    cmd.Parameters.AddWithValue("@Course", course);
    cmd.Parameters.AddWithValue("@Unit", unit);
    cmd.Parameters.AddWithValue("@Name", name);
    cmd.Parameters.AddWithValue("@Username", username);
    cmd.Parameters.AddWithValue("@Size", size);
    cmd.Parameters.AddWithValue("@MIME", mime);
    cmd.Parameters.AddWithValue("@content", content);
    cmd.ExecuteNonQuery();
    connection.Close();
}

ConnectionString 是正确的。

Answer 1

应该是 INSERT INTO uploads VALUES(...) 您可能还想指定列顺序，例如 INSERT INTO uploads(col1, col2, etc...) VALUES(val for col1, val for col2..., etc) 因为如果没有则SQL 会尝试“猜测”，它可能会猜错。