网络游戏_数据库插入

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using MySql.Data.MySqlClient;

namespace MySql数据库操作
{
    class Program
    {
        static void Main(string[] args)
        {
            string connStr = "Database=game;Data Source=127.0.0.1;port=3306;User Id=root;Password=shirln123My;";
            MySqlConnection conn = new MySqlConnection(connStr);
            conn.Open();

            #region 查询
            // MySqlCommand cmd = new MySqlCommand("select * from user where id=1", conn);
            // MySqlDataReader reader = cmd.ExecuteReader();
            //while(reader.Read())
            // {              
            //     string username = reader.GetString("username");
            //     string password = reader.GetString("password");
            //     Console.WriteLine(username+";"+password);

            // }
            // reader.Close();
            #endregion

            #region 插入
            string username = "cwer";
            string password = "qwedv';delete  from user;";
            //MySqlCommand cmd = new MySqlCommand("insert into user set username='" + username + "'" + ",password='" + password + "'", conn);
            //cmd.ExecuteNonQuery();
            MySqlCommand cmd = new MySqlCommand("insert into user set username=@un,password=@pwd", conn);
            cmd.Parameters.AddWithValue("un", username);
            cmd.Parameters.AddWithValue("pwd", password);
            cmd.ExecuteNonQuery();
            #endregion
            conn.Close();
            Console.ReadKey();
        }
    }
}