Reputation: 387
Code:
com.CommandText = "select username, pass from Employees where lastName like '@Last' and firstName like '@First'";
com.Parameters.AddWithValue("@Last", lastName); // lastName is a method argument
SqlParameter param = new SqlParameter();
param.ParameterName = "@First";
param.Value = firstName;
com.Parameters.Add(param);
No matter what I do, the parameters are not inserted. What gives?
Upvotes: 0
Views: 119
Reputation: 7850
Do not put single quotes around your parameters, these are implied anyway.
Also, try using SqlCommand.CreateParameter as well:
com.CommandText = "select username, pass from Employees where lastName like @Last and firstName like @First";
com.Parameters.AddWithValue("@Last", lastName); // lastName is a method argument
SqlParameter param = com.CreateParameter();
param.ParameterName = "@First";
param.Value = firstName;
com.Parameters.Add(param);
Upvotes: 4