原创 SqlParameter 事务 批量数据插入

不错，很好，以后防注入批量事务提交虽然麻烦点研究了几个小时，但不会是问题了

 SqlCommand cmd;
        HelpSqlServer helps = new HelpSqlServer();
        //定义SqlParameter数组
        SqlParameter[] param = new SqlParameter[4];


        protected void Page_Load(object sender, EventArgs e)
        {
            var strsql = "";
            for (int i = 0; i < 4; i++)
            {
                strsql += "insert into  Questions(PID) values";
                strsql += "(@PID" + i + ");";

                param[i] = new SqlParameter("@PID" + i + "", SqlDbType.UniqueIdentifier);
                param[i].Value = Guid.NewGuid();

            }

            using (SqlConnection conn = new SqlConnection(HelpSqlServer.ConnectionString))
            {
                cmd = new SqlCommand(strsql, conn);


                conn.Open();
                SqlTransaction transaction = conn.BeginTransaction();

                cmd.Transaction = transaction;
                foreach (SqlParameter para in param)
                {
                    cmd.Parameters.Add(para);
                }

                try
                {
                    cmd.ExecuteNonQuery();
                    transaction.Commit();
                }
                catch
                {
                    transaction.Rollback();
                }
            }

        }