1 
    Dim conn As OleDbConnection
    Dim cmd As OleDbCommand

    Public Sub openDB()
        conn = New OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Application.StartupPath & "\VFMS_DB.mdb;" & "Jet OLEDB:System Database=Security.mdw;User ID=Adster;Password=300624;")
        conn.Open()
    End Sub

    Public Function UpdateUser() As Integer
        Dim retCode As New Integer

        Try
            openDB()
            cmd = conn.CreateCommand()

下面的更新命令一直给我这个错误：“从字符串“' WHERE [用户名] ='”到类型'Double'的转换无效。” 我不知道为什么。aUserName 字段是一个字符串字段，我检查以确保它已填充。

            cmd.CommandText = "UPDATE Users SET [First Name] = '" & aName & "', [Last Name] = '" & aSurname & "', [Contact Number] = '" & aContactNum & "', [Password] = '" & aPassword & "', [User Rights] = '" & aUserRights + "' WHERE [Username] = '" + aUserName + "' "

            cmd.ExecuteNonQuery()
            conn.Close()

            'rsAddRecs = rsConn.Execute("UPDATE Users ([First Name], [Last Name], [Contact Number], [User Name], [Password], [User Rights]) VALUES ('" & aName & "','" & aSurname & "','" & aContactNum & "','" & aUserName & "','" & aPassword & "','" & aUserRights & "')")

            retCode = 0
            'rsConn.Close()
            Return retCode

        Catch ex As Exception
            MessageBox.Show(ex.ToString, ex.Message, MessageBoxButtons.OK)
            retCode = 1
            Return retCode
        End Try
    End Function
4

2 回答 2

5

你有一个错字。您在sql 字符串的末尾使用+ concat 字符而不是&字符

错误的

cmd.CommandText = "UPDATE Users SET [First Name] = '" & aName & _ 
                  "', [Last Name] = '" & aSurname & _
                  "', [Contact Number] = '" & aContactNum & _
                  "', [Password] = '" & aPassword & "', [User Rights] = '" & _
                  aUserRights + "' WHERE [Username] = '" + aUserName + "' "
'                             ^                          ^           ^

对

cmd.CommandText = "UPDATE Users SET [First Name] = '" & aName & _
                  "', [Last Name] = '" & aSurname & _
                  "', [Contact Number] = '" & aContactNum & _
                  "', [Password] = '" & aPassword & "', [User Rights] = '" & _
                  aUserRights & "' WHERE [Username] = '" & aUserName & "' "
'                             ^                          ^           ^
于 2009-05-12T10:13:56.953 回答
0

您的 SQL 代码使用[Username]：

cmd.CommandText = "UPDATE Users SET ... [Username]...

而您注释掉了使用的代码[User Name]：

'rsAddRecs = rsConn.Execute("UPDATE Users ... [User Name]...

错误的列名可能是问题的根源吗？

另一个想法：您是否对参数值进行了清理，例如，该值是否包含会扰乱动态 SQL 的单引号。在任何情况下，我认为您应该考虑使用准备好的语句（甚至 PROCEDURES）并使用 Parameter 对象来调用 SQL，从而将参数值的清理推迟到 OLE DB 提供程序，这当然会比主题更了解你或我:)

于 2009-05-12T11:04:47.450 回答