Hello, I have a parser on c # which writes articles to the database.

private void insertData() { string conStr = "server=127.0.0.1;user=skr1pt1k;" + "database=study;password=11101110aA;"; using (MySqlConnection con = new MySqlConnection(conStr)) { try { string a = File.ReadAllText(@"title.txt", Encoding.Default); string b = File.ReadAllText(@"text_out.txt", Encoding.Default); string c = File.ReadAllText(@"asdd.txt", Encoding.Default); string sql = "INSERT INTO text (Title, Text, Tags) VALUES ('" + a + "', '" + b + "', '" + c + "')"; MySqlCommand cmd = new MySqlCommand(sql, con); con.Open(); cmd.ExecuteNonQuery(); } catch (Exception ex) { SystemSounds.Beep.Play(); MessageBox.Show(ex.Message); } } }

Sometimes, when a page parsit error pops up, you get an error in your sql syntax

Here is a photo database (structure) http://c2n.me/3CA7PMx . What could be wrong? Here is an example of one error. http://c2n.me/3CA7Uk6

  • In lines a, b and c there is something (in particular, single quotes) that makes the resulting query string wrong. Can you see what happens in string sql ? And show on the website if a, b and c are not company secret. In general, use the query with the parameters and life will become easier. How much taldych about this, and noobs that the peas against the wall. - Sergey
  • From a DB worked 1 day. - Sergiy

1 answer 1

as you rightly noticed in the comments, most likely the problem is that in the sparsen text there are single quotes. try using such code

 string sql = "INSERT INTO text (Title, Text, Tags) VALUES (@a, @b, @c)"; MySqlCommand cmd = new MySqlCommand(sql, con); cmd.Parameters.AddWithValue("@a", a); cmd.Parameters.AddWithValue("@b", b); cmd.Parameters.AddWithValue("@c", c); con.Open(); cmd.ExecuteNonQuery();