sqlconnection med parametre


// string sqlString = "SELECT UserName FROM UserInfoTable";

SqlConnection con = new SqlConnection(connectionString);
SqlCommand cmd = new SqlCommand(“CreateMessage”, con);
cmd.CommandType = CommandType.StoredProcedure;

//input parametre til storaged procedure
SqlParameter param = new SqlParameter(“@MsgTitle”, SqlDbType.NChar, 20);
param.Value = msgTitle;
cmd.Parameters.Add(param);

param = new SqlParameter(“@MsgContent”, SqlDbType.NVarChar, 300);
param.Value = msgContent;
cmd.Parameters.Add(param);

param = new SqlParameter(“@UserID”, SqlDbType.Int, 4);
param.Value = userID;
cmd.Parameters.Add(param);
//kør

con.Open();
int localstatus = cmd.ExecuteNonQuery();
con.Close();