Sql参数化 添加

Repository层

添加需要的类

 

 然后在类里面实例化需要用到的上下文

接下来写方法

public int AddUserInfo(UserInfo userInfo) {
            try
            { 5                 //SQL
                //return db.Database.ExecuteSqlCommand($"insert into UserInfo values('{userInfo.Uname}','{userInfo.Upwd}','{userInfo.Udell}','{userInfo.Usex}','{userInfo.Email}','{userInfo.Utime}')");

                SqlParameter[] sqls = {
                    new SqlParameter("@Uname",userInfo.Uname),
                    new SqlParameter("@Upwd",userInfo.Upwd),
                    new SqlParameter("@Udell",userInfo.Udell),
                    new SqlParameter("@Usex",userInfo.Usex),
                    new SqlParameter("@Email",userInfo.Email),
                    new SqlParameter("@Utime",userInfo.Utime)
                };

                return db.Database.ExecuteSqlCommand($"insert into UserInfo values(@Uname,@Upwd,@Udell,@Usex,@Email,@Utime)",sqls);

            }
            catch (Exception)
            {

                throw;
            }
        }