C# sqlserver 参数化

static void Main()
    {
        string connectionString = "Your Connection String Here";
        string sqlQuery = "SELECT * FROM Users WHERE Username = @username AND Password = @password";
 
        using (SqlConnection connection = new SqlConnection(connectionString))
        {
            SqlCommand command = new SqlCommand(sqlQuery, connection);
 
            // 添加参数
            command.Parameters.AddWithValue("@username", "exampleUser");
            command.Parameters.AddWithValue("@password", "examplePass");
 
            try
            {
                connection.Open();
                using (SqlDataReader reader = command.ExecuteReader())
                {
                    while (reader.Read())
                    {
                        Console.WriteLine(reader["Username"] + " " + reader["Password"]);
                    }
                }
            }
            catch (SqlException e)
            {
                Console.WriteLine(e.Message);
            }
        }
    }

private void btnCreateDbParameter_Click(object sender, EventArgs e)
{

    // 创建DbParameter的实例
    //DbParameter param1 = CreateDbParameter("@ID", DbType.Int32, 1);
    //DbParameter param2 = CreateDbParameter("@Name", DbType.String, "John Doe");


    DbParameter param1 = DataBaseClient .CreateDbParameter("@code", 3669);
    DbParameter param2 = DataBaseClient.CreateDbParameter("@name", "k");

    // 创建IList<DbParameter>
    IList<DbParameter> parameters = new List<DbParameter>();
    parameters.Add(param1);
    parameters.Add(param2);


    // 使用IList<DbParameter>，例如在数据库操作中
    // ...

    dtSchema = DataBaseClient.GetTableSchema(tbName);
    dtSchema.TableName = tbName;//初始化DataGridView:根据解析表dtSchema,生成sql专用
    DataGridViewUtil.InitialDataGridViewColumns(dtSchema, dgvData);

    string sql = "select * from user where code=@code and name=@name";
  


    dtData = DataBaseClient.ExecuteDataTable(sql, parameters);
    dtData.TableName = tbName;
    if (dtData == null) { return; }
    dgvData.DataSource = dtData; //用DataTable来绑定 


}