Pass parameters to SqlCommand
using System; using System.Data; using System.Data.SqlClient; class CommandExampleParameters { static void Main() { SqlConnection thisConnection = new SqlConnection("server=(local)\\SQLEXPRESS;database=MyDatabase;Integrated Security=SSPI"); SqlCommand nonqueryCommand = thisConnection.CreateCommand(); try { thisConnection.Open(); nonqueryCommand.CommandText = "CREATE TABLE MyTable (MyName VARCHAR (30), MyNumber integer)"; Console.WriteLine(nonqueryCommand.CommandText); Console.WriteLine("Number of Rows Affected is: {0}", nonqueryCommand.ExecuteNonQuery()); nonqueryCommand.CommandText = "INSERT INTO MyTable VALUES (@MyName, @MyNumber)"; nonqueryCommand.Parameters.Add("@MyName", SqlDbType.VarChar, 30); nonqueryCommand.Parameters.Add("@MyNumber", SqlDbType.Int); nonqueryCommand.Prepare(); string[] names = { "A", "B", "C", "D" } ; int i; for (i=1; i<=4; i++) { nonqueryCommand.Parameters["@MyName"].Value = names[i-1]; nonqueryCommand.Parameters["@MyNumber"].Value = i; Console.WriteLine(nonqueryCommand.CommandText); Console.WriteLine("Number of Rows Affected is: {0}", nonqueryCommand.ExecuteNonQuery()); } } catch (SqlException ex) { Console.WriteLine(ex.ToString()); } finally { thisConnection.Close(); Console.WriteLine("Connection Closed."); } } }