Syntax error near keyword 'xxx' ... crazy ... online etc.

daemon

Everyone big, quickly help the younger, for the database I want to write it as a DLL:

CADODatabase :: CADODatabase ()
{
    :: CoInitialize (0);
    m_pConnect.CreateInstance (__ uuidof (Connection));
    m_pConnect-> ConnectionString = "Provider = SQLOLEDB.1; Integrated Security = SSPI;\
        Persist Security Info = False; Initial Catalog = NetDisk; Data Source = 127.0.0.1 ";
    m_pConnect-> Open ("", "", "", -1);
}

CADODatabase :: ~ CADODatabase ()
{
    m_pConnect-> Close ();
    m_pConnect.Release ();
    :: CoUninitialize ();
}

// Judge if the user is legal.
bool CADODatabase :: JudgeLogIn (CString strUsername, CString strPassword, CString strTableName)
{
    if (FAILED (m_pRecordset.CreateInstance (__ uuidof (Recordset))))
    {
        return false;
    }

    CString strQuery;
    strQuery.Format (_T ("select * from% s where% s.Username =\'% s\' AND\
                       % s.Password =\'% s\' "), strTableName, strTableName,
                       strUsername, strTableName, strPassword);

    try
    {
        m_pRecordset-> Open (_bstr_t (strQuery),
            _variant_t ((IDispatch *) m_pConnect, true), adOpenStatic,
            adLockOptimistic, adCmdTable);

        m_pRecordset-> MoveFirst ();
        if (m_pRecordset-> adoEOF == VARIANT_FALSE)
        {
            return true;
        }
        return false;
    }
    catch (_com_error&e)
    {
        AfxMessageBox (e.Description ());
    }

    m_pRecordset-> Close ();
    m_pRecordset.Release ();
    return false;
}

I always throw an exception at m_pRecordset-> Open, and then I get an error description: "There is a syntax error near the keyword 'select'", but when I stepped into this step, COPY the value of strQuery to Query the analyzer, and then executed it ... but speechless ... Why is that?

rsq666

\'% s\' Is it appropriate to see this kind of gratitude?

shaziahlx

strQuery.Format (_T ("select * from% s where% s.Username =\'% s\' AND\
                       % s.Password =\'% s\' "), strTableName, strTableName,
                       strUsername, strTableName, strPassword);
-> strQuery.Format (_T ("select * from% s where% s.Username = '% s' AND
                       % s.Password = '% s' "), strTableName, strTableName,
                       strUsername, strTableName, strPassword);
Give it a try

ghostxp16

This error is generally a SQL syntax error.
Copy the value of strQuery to the database tool and execute it directly to see what strQuery is

hejian2

m_pRecordset-> Open (_bstr_t (strQuery),
            _variant_t ((IDispatch *) m_pConnect, true), adOpenStatic,
            adLockOptimistic, adCmdTable);
Change to
m_pRecordset-> Open (_variant_t ((CString) strQuery)
            _variant_t ((IDispatch *) m_pConnect, true), adOpenStatic,
            adLockOptimistic, adCmdTable);
Try

daemon

I have written a new class. It is okay not to inherit from MFC's CObject. Is the same code because it cannot be inherited from CObject? ~~

joe2086

Your sql statement is wrong after format, to have a look at messageBox, adCmdTable should be adCmdText, change to
strQuery.Format(_T("select * from %s where %s.Username ='%s' AND
                       %s.Password ='%s'"), strTableName, strTableName,
                       strUsername, strTableName, strPassword) Try it

tonycc

Password is a reserved word of SQLServer, you change the field name