public void updateModel(tblSachModel sach) { //string sql = "Update tblSach set TENSACH=N'" + sach.TenSach + "',TACGIA=N'" + sach.TacGia + "',NHAXUATBAN=N'" + sach.NhaXuatBan + "',MALV='" + sach.MaLinhVuc + "',NAMXB='" + sach.NamXuatBan + "',SOTRANG='" + sach.SoTrang + "',SOLUONG='" + sach.SoLuong + "',SOSACHHONG='" + sach.SoSachHong + "',NGAYNHAP='" + sach.NgayNhap + "',GHICHU=N'" + sach.GhiChu + "' where MASACH='" + sach.MaSach + "'"; //connectSer.ThucThiSQLTheoPhiKetNoi(sql); sqlCom = new SqlCommand(); sqlCom.CommandType = CommandType.StoredProcedure; sqlCom.CommandText = "USP_UpdateSach"; sqlCom.Parameters.Add("@MASACH", SqlDbType.VarChar).Value = sach.MaSach; sqlCom.Parameters.Add("@TENSACH", SqlDbType.NVarChar).Value = sach.TenSach; sqlCom.Parameters.Add("@TACGIA", SqlDbType.NVarChar).Value = sach.TacGia; sqlCom.Parameters.Add("@NHAXUATBAN", SqlDbType.NVarChar).Value = sach.NhaXuatBan; sqlCom.Parameters.Add("@MALV", SqlDbType.VarChar).Value = sach.MaLinhVuc; sqlCom.Parameters.Add("@NAMXB", SqlDbType.VarChar).Value = sach.NamXuatBan; sqlCom.Parameters.Add("@SOTRANG", SqlDbType.Int).Value = sach.SoTrang; sqlCom.Parameters.Add("@SOLUONG", SqlDbType.Int).Value = sach.SoLuong; sqlCom.Parameters.Add("@SOSACHHONG", SqlDbType.Int).Value = sach.SoSachHong; sqlCom.Parameters.Add("@NGAYNHAP", SqlDbType.VarChar).Value = sach.NgayNhap; sqlCom.Parameters.Add("@GHICHU", SqlDbType.NVarChar).Value = sach.GhiChu; sqlCom.Connection = connectSer.Connect(); sqlCom.ExecuteNonQuery(); }
public void createModel(tblSachModel sach) { //string sql = "Insert Into tblSach(MASACH,TENSACH,TACGIA,NHAXUATBAN,MALV,NAMXB,SOTRANG,SOLUONG,SOSACHHONG,NGAYNHAP,GHICHU) values ('" + sach.MaSach + "',N'" + sach.TenSach + "',N'" + sach.TacGia + "',N'" + sach.NhaXuatBan + "','" + sach.MaLinhVuc + "','" + sach.NamXuatBan + "','" + sach.SoTrang + "','" + sach.SoLuong + "','" + sach.SoSachHong + "','" + sach.NgayNhap + "',N'" + sach.GhiChu + "')"; //connectSer.ThucThiSQLTheoPhiKetNoi(sql); sqlCom = new SqlCommand(); sqlCom.CommandType = CommandType.StoredProcedure; sqlCom.CommandText = "USP_InsertSach"; sqlCom.Parameters.Add("@MASACH", SqlDbType.VarChar).Value = sach.MaSach; sqlCom.Parameters.Add("@TENSACH", SqlDbType.NVarChar).Value = sach.TenSach; sqlCom.Parameters.Add("@TACGIA", SqlDbType.NVarChar).Value = sach.TacGia; sqlCom.Parameters.Add("@NHAXUATBAN", SqlDbType.NVarChar).Value = sach.NhaXuatBan; sqlCom.Parameters.Add("@MALV", SqlDbType.VarChar).Value = sach.MaLinhVuc; sqlCom.Parameters.Add("@NAMXB", SqlDbType.VarChar).Value = sach.NamXuatBan; sqlCom.Parameters.Add("@SOTRANG", SqlDbType.Int).Value = sach.SoTrang; sqlCom.Parameters.Add("@SOLUONG", SqlDbType.Int).Value = sach.SoLuong; sqlCom.Parameters.Add("@SOSACHHONG", SqlDbType.Int).Value = sach.SoSachHong; sqlCom.Parameters.Add("@NGAYNHAP", SqlDbType.VarChar).Value = sach.NgayNhap; sqlCom.Parameters.Add("@GHICHU", SqlDbType.NVarChar).Value = sach.GhiChu; sqlCom.Connection = connectSer.Connect(); sqlCom.ExecuteNonQuery(); }