如何使用用户输入搜索数据库

如何解决如何使用用户输入搜索数据库

我使用的是 Windows 窗体应用程序。

我有一个加载到 datagridview 的表，我有两个用户可以使用的搜索过滤器。一个是组合框，一个是文本框，所以他们可以按名称搜索。

两者都设置为在选择/键入某些内容时进行搜索。我想根据两个输入进行搜索。所以当用户从组合框中选择一个选项时，当前表格将被过滤，我希望能够在文本框中输入一个名称以进一步过滤它。

这是我用于名称搜索的代码：

 private void nameSearch()
 {
     using (sqliteCommand cmd = connAccount.CreateCommand())
     {
         try
         {
             connAccount = new sqliteConnection(dbConnection.source);

             cmd.CommandText = @"SELECT accid,account.custid,customer.title,customer.firstname || ' ' || customer.lastname AS Name,product.isaname AS ProductName,balance,accrued,active FROM account INNER JOIN customer ON customer.custid = account.custid INNER JOIN product ON product.prodid = account.prodid WHERE Name = '" + txt_name.Text + "';";

             da_Accounts = new sqliteDataAdapter(cmd.CommandText,connAccount);
             dt_Accounts = new DataTable();
             da_Accounts.Fill(dt_Accounts);
             dgv_Account.DataSource = dt_Accounts;
         }
         catch (Exception ex)
         {
             MessageBox.Show(ex.Message);
         }
     }
 }

我已经尝试了以下代码，但是当我尝试在文本框中键入名称时，我在“0”附近收到错误语法逻辑错误。

private void nameSearch()
{
    if (string.IsNullOrWhiteSpace(cb_active.Text))
    {
        using (sqliteCommand cmd = connAccount.CreateCommand())
        {
            try
            {
                connAccount = new sqliteConnection(dbConnection.source);

                cmd.CommandText = @"SELECT accid,active FROM account INNER JOIN customer ON customer.custid = account.custid INNER JOIN product ON product.prodid = account.prodid WHERE Name = '" + txt_name.Text + "';";

                da_Accounts = new sqliteDataAdapter(cmd.CommandText,connAccount);
                dt_Accounts = new DataTable();
                da_Accounts.Fill(dt_Accounts);
                dgv_Account.DataSource = dt_Accounts;
            }
            catch (Exception ex)
            {
                MessageBox.Show(ex.Message);
            }
        }
    }
    else
    {
        using (sqliteCommand cmd = connAccount.CreateCommand())
        {
            try
            {
                connAccount = new sqliteConnection(dbConnection.source);

                cmd.CommandText = @"SELECT accid,active FROM account INNER JOIN customer ON customer.custid = account.custid INNER JOIN product ON product.prodid = account.prodid WHERE Name = '" + txt_name.Text + "AND active = '" + cb_active.Selectedindex + "';";

                da_Accounts = new sqliteDataAdapter(cmd.CommandText,connAccount);
                dt_Accounts = new DataTable();
                da_Accounts.Fill(dt_Accounts);
                dgv_Account.DataSource = dt_Accounts;
            }
            catch (Exception ex)
            {
                MessageBox.Show(ex.Message);
            }
        }
    }
}