在C＃和MySQL中使用预准备语句

尝试

'

Prepare

cmd = new MySqlCommand("SELECt * FROM admin WHERe admin_username=@val1 AND admin_password=PASSWORd(@val2)", MySqlConn.conn);cmd.Parameters.AddWithValue("@val1", tboxUserName.Text);cmd.Parameters.AddWithValue("@val2", tboxPassword.Text);cmd.Prepare();