如何获取记录从日期到日期的SQL Server

Question

我要解释它的图片和源代码

前设计

后端代码

private void AddRecord(object sender, RoutedEventArgs e) 
    { 
     string date = datee.Text + " " + DateTime.Now.ToLongTimeString(); 
     if (datee.Text == "" || cusname.SelectedValue == null || Vanda.SelectedValue == null || price.SelectedValue == null || bags.Text == "") 
     { 
      MessageBox.Show("please fill the data"); 
     } 
     else 
     { 

      DataRowView dt = (DataRowView)Vanda.SelectedItem; 
      string vda = dt["vanda"].ToString(); 
      DataRowView dt2 = (DataRowView)price.SelectedItem; 
      string data2 = dt2["price"].ToString(); 
      decimal dta = Convert.ToDecimal(data2); 
      Int32 pricee = Convert.ToInt32(dta); 
      decimal bag = Convert.ToDecimal(bags.Text); 
      decimal credit = pricee * bag; 
      DataRowView cus = (DataRowView)cusname.SelectedItem; 

      string cusidd = cus["id"].ToString(); 
      int cusid = Convert.ToInt16(cusidd); 
      con.Open(); 
      SqlCommand cmd5 = new SqlCommand("SELECT price - retailprice FROM vanda where vanda = '" + vda + "' and price = '" + pricee + "'", con); 
      SqlDataReader reader = cmd5.ExecuteReader(); 
      reader.Read(); 
      string val = reader.GetValue(0).ToString(); 
      decimal valu = Convert.ToDecimal(val); 
      Int32 profit = Convert.ToInt32(valu); 
      reader.Close(); 
      SqlCommand cmd3 = new SqlCommand("insert into records (cusid,datee,description,vanda,price,bag,credit,debit,profit) values ('" + cusid + "','" + date + "','" + des.Text + "','" + vda + "','" + pricee + "','" + bags.Text + "','" + credit + "','','"+profit+"')", con); 
      cmd3.ExecuteNonQuery(); 
      MessageBox.Show("Data Inserted"); 
      con.Close(); 

     } 

    } 

DataGrid代码

private void enddate_SelectedDateChanged(object sender, SelectionChangedEventArgs e) 
    { 
     if (startdate.Text == "") 
     { 
      MessageBox.Show("Please Select Starting Date"); 
     } 
     else 
     { 
      con.Open(); 
      SqlDataAdapter adapter = new SqlDataAdapter(" i need here Query ", con); 
      DataSet ds = new DataSet(); 
      adapter.Fill(ds); 
      data.DataContext = ds.Tables[0]; 
     } 

    } 

SQL Server数据库

我希望你能清楚地了解它。现在清除错误并改进我的代码/逻辑/查询（^ _ ^）。 BLA BLA唧唧歪歪唧唧歪歪唧唧歪歪

Answer 1

首先，你的SQL应该使用命名参数，以避免SQL注入攻击：

select r.datee,c.name,r.description,r.vanda,r.price,r.bag,r.credit,r.debit 
from records as r, 
    customer as c 
where r.cusid = c.id 
     and c.name = @cname 
     and r.datee BETWEEN @startDate AND @endDate 

当你创建这些变量，你会通过插入到您的查询中，格式如下：

var startDate = DateTime.Parse(datee.Text).ToString("M/d/yyyy"); 
var endDate = DateTime.Now.ToString("M/d/yyyy") + " 23:59:59"; 

这会将日期值转换为您的数据库预期的格式。

Answer 2

select r.datee,c.name,r.description,r.vanda,r.price,r.bag,r.credit,r.debit 
from records r 
JOIN customer c ON r.cusid = c.id 
WHERE c.name = 'aizaz' AND DateColumn BETWEEN StartDate AND EndDATE 

Answer 3

数据库不会以任何特定的字符串格式存储日期。日期是一个日期，它没有特定的格式。格式化日期的输出是一个UI的事情。

您使用SelectedDate属性获得DatePicker的实际DateTime值。您应该使用将这些值作为参数传递给您的命令：

SqlCommand cmd = new SqlCommand("select r.datee,c.name,r.description,r.vanda,r.price,r.bag,r.credit,r.debit from records as r, customer as c where r.cusid = c.id and c.name = @cname and r.datee BETWEEN @startDate AND @endDate"); 
cmd.Parameters.AddWithValue("@startDate", datePicker1.SelectedDate.Value.Date); 
cmd.Parameters.AddWithValue("@endDate", datePicker2.SelectedDate.Value.Date.AddHours(23).AddMinutes(59).AddSeconds(59));