感謝軟謀徐老師的SQLHelper.as , 代碼如下（本人有所改動）：

using System;
using System.Collections;
using System.Collections.Generic;
using System.Configuration;
using System.Data;
using System.Data.SqlClient;
using System.Linq;
using System.Web;
namespace DBDome
{
    /// 此類為抽象類，
    /// 不允許實例化，在應用時直接調用即可
    /// </summary>
    public sealed class SqlHelper
    {
        private SqlHelper() { }
        /// <summary>
        /// 數據庫連接字符串
        /// </summary>
        public static readonly string connectionString = ConfigurationManager.ConnectionStrings["con"].ToString();
        // Hashtable to store cached parameters
        private static Hashtable parmCache = Hashtable.Synchronized(new Hashtable());
        #region//ExecteNonQuery方法
        /// <summary>
        ///執行一個不需要返回值的SqlCommand命令，通過指定專用的連接字符串。
        /// 使用參數數組形式提供參數列表 
        /// </summary>
        /// <param name="connectionString">一個有效的數據庫連接字符串</param>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個數值表示此SqlCommand命令執行後影響的行數</returns>
        public static int ExecteNonQuery(string connectionString, CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            SqlCommand cmd = new SqlCommand();
            using (SqlConnection conn = new SqlConnection(connectionString))
            {
                //通過PrePareCommand方法將參數逐個加入到SqlCommand的參數集合中
                PrepareCommand(cmd, conn, null, cmdType, cmdText, commandParameters);
                int val = cmd.ExecuteNonQuery();
                //清空SqlCommand中的參數列表
                cmd.Parameters.Clear();
                return val;
            }
        }
        /// <summary>
        ///執行一個不需要返回值的SqlCommand命令，通過指定專用的連接字符串。
        /// 使用參數數組形式提供參數列表 
        /// </summary>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個數值表示此SqlCommand命令執行後影響的行數</returns>
        public static int ExecteNonQuery(CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            return ExecteNonQuery(connectionString, cmdType, cmdText, commandParameters);
        }
        /// <summary>
        ///存儲過程專用
        /// </summary>
        /// <param name="cmdText">存儲過程的名字</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個數值表示此SqlCommand命令執行後影響的行數</returns>
        public static int ExecteNonQueryProducts(string cmdText, SqlParameter[] commandParameters)
        {
            return ExecteNonQuery(CommandType.StoredProcedure, cmdText, commandParameters);
        }
        /// <summary>
        ///Sql語句專用
        /// </summary>
        /// <param name="cmdText">T_Sql語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個數值表示此SqlCommand命令執行後影響的行數</returns>
        public static int ExecteNonQueryText(string cmdText, SqlParameter[] commandParameters)
        {
            return ExecteNonQuery(CommandType.Text, cmdText, commandParameters);
        }
        #endregion
        #region//GetTable方法
        /// <summary>
        /// 執行一條返回結果集的SqlCommand，通過一個已經存在的數據庫連接
        /// 使用參數數組提供參數
        /// </summary>
        /// <param name="connecttionString">一個現有的數據庫連接</param>
        /// <param name="cmdTye">SqlCommand命令類型</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個表集合(DataTableCollection)表示查詢得到的數據集</returns>
        public static DataTableCollection GetTable(string connecttionString, CommandType cmdTye, string cmdText, SqlParameter[] commandParameters)
        {
            SqlCommand cmd = new SqlCommand();
            DataSet ds = new DataSet();
            using (SqlConnection conn = new SqlConnection(connecttionString))
            {
                PrepareCommand(cmd, conn, null, cmdTye, cmdText, commandParameters);
                SqlDataAdapter adapter = new SqlDataAdapter();
                adapter.SelectCommand = cmd;
                adapter.Fill(ds);
            }
            DataTableCollection table = ds.Tables;
            return table;
        }
        /// <summary>
        /// 執行一條返回結果集的SqlCommand，通過一個已經存在的數據庫連接
        /// 使用參數數組提供參數
        /// </summary>
        /// <param name="cmdTye">SqlCommand命令類型</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個表集合(DataTableCollection)表示查詢得到的數據集</returns>
        public static DataTableCollection GetTable(CommandType cmdTye, string cmdText, SqlParameter[] commandParameters)
        {
            return GetTable(cmdTye, cmdText, commandParameters);
        }

        /// <summary>
        /// 存儲過程專用
        /// </summary>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個表集合(DataTableCollection)表示查詢得到的數據集</returns>
        public static DataTableCollection GetTableProducts(string cmdText, SqlParameter[] commandParameters)
        {
            return GetTable(CommandType.StoredProcedure, cmdText, commandParameters);
        }
        /// <summary>
        /// Sql語句專用
        /// </summary>
        /// <param name="cmdText"> T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個表集合(DataTableCollection)表示查詢得到的數據集</returns>
        public static DataTableCollection GetTableText(string cmdText, SqlParameter[] commandParameters)
        {
            return GetTable(CommandType.Text, cmdText, commandParameters);
        }
        #endregion

        /// <summary>
        /// 為執行命令準備參數
        /// </summary>
        /// <param name="cmd">SqlCommand 命令</param>
        /// <param name="conn">已經存在的數據庫連接</param>
        /// <param name="trans">數據庫事物處理</param>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">Command text，T-SQL語句 例如 Select * from Products</param>
        /// <param name="cmdParms">返回帶參數的命令</param>
        private static void PrepareCommand(SqlCommand cmd, SqlConnection conn, SqlTransaction trans, CommandType cmdType, string cmdText, SqlParameter[] cmdParms)
        {
            //判斷數據庫連接狀態
            if (conn.State != ConnectionState.Open)
                conn.Open();
            cmd.Connection = conn;
            cmd.CommandText = cmdText;
            //判斷是否需要事物處理
            if (trans != null)
                cmd.Transaction = trans;
            cmd.CommandType = cmdType;
            if (cmdParms != null)
            {
                foreach (SqlParameter parm in cmdParms)
                    cmd.Parameters.Add(parm);
            }
        }
        /// <summary>
        /// Execute a SqlCommand that returns a resultset against the database specified in the connection string 
        /// using the provided parameters.
        /// </summary>
        /// <param name="connectionString">一個有效的數據庫連接字符串</param>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>A SqlDataReader containing the results</returns>
        public static SqlDataReader ExecuteReader(string connectionString, CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            SqlCommand cmd = new SqlCommand();
            SqlConnection conn = new SqlConnection(connectionString);
            // we use a try/catch here because if the method throws an exception we want to 
            // close the connection throw code, because no datareader will exist, hence the 
            // commandBehaviour.CloseConnection will not work
            try
            {
                PrepareCommand(cmd, conn, null, cmdType, cmdText, commandParameters);
                SqlDataReader rdr = cmd.ExecuteReader(CommandBehavior.CloseConnection);
                cmd.Parameters.Clear();
                return rdr;
            }
            catch
            {
                conn.Close();
                throw;
            }
        }
        #region//ExecuteDataSet方法
        /// <summary>
        /// return a dataset
        /// </summary>
        /// <param name="connectionString">一個有效的數據庫連接字符串</param>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>return a dataset</returns>
        public static DataSet ExecuteDataSet(string connectionString, CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            SqlConnection conn = new SqlConnection(connectionString);
            SqlCommand cmd = new SqlCommand();
            try
            {
                PrepareCommand(cmd, conn, null, cmdType, cmdText, commandParameters);
                SqlDataAdapter da = new SqlDataAdapter();
                DataSet ds = new DataSet();
                da.SelectCommand = cmd;
                da.Fill(ds);
                return ds;
            }
            catch
            {
                conn.Close();
                throw;
            }
        }

        /// <summary>
        /// 返回一個DataSet
        /// </summary>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>return a dataset</returns>
        public static DataSet ExecuteDataSet(CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            return ExecuteDataSet(connectionString, cmdType, cmdText, commandParameters);
        }
        /// <summary>
        /// 返回一個DataSet
        /// </summary>
        /// <param name="cmdText">存儲過程的名字</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>return a dataset</returns>
        public static DataSet ExecuteDataSetProducts(string cmdText, SqlParameter[] commandParameters)
        {
            return ExecuteDataSet(connectionString, CommandType.StoredProcedure, cmdText, commandParameters);
        }
        /// <summary>
        /// 返回一個DataSet
        /// </summary>
        /// <param name="cmdText">T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>return a dataset</returns>
        public static DataSet ExecuteDataSetText(string cmdText, SqlParameter[] commandParameters)
        {
            return ExecuteDataSet(connectionString, CommandType.Text, cmdText, commandParameters);
        }

        public static DataView ExecuteDataSet(string connectionString, string sortExpression, string direction, CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            SqlConnection conn = new SqlConnection(connectionString);
            SqlCommand cmd = new SqlCommand();
            try
            {
                PrepareCommand(cmd, conn, null, cmdType, cmdText, commandParameters);
                SqlDataAdapter da = new SqlDataAdapter();
                DataSet ds = new DataSet();
                da.SelectCommand = cmd;
                da.Fill(ds);
                DataView dv = ds.Tables[0].DefaultView;
                dv.Sort = sortExpression + " " + direction;
                return dv;
            }
            catch
            {
                conn.Close();
                throw;
            }
        }
        #endregion

        #region // ExecuteScalar方法

        /// <summary>
        /// 返回第一行的第一列
        /// </summary>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個對象</returns>
        public static object ExecuteScalar(CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            return ExecuteScalar(SqlHelper.connectionString, cmdType, cmdText, commandParameters);
        }
        /// <summary>
        /// 返回第一行的第一列存儲過程專用
        /// </summary>
        /// <param name="cmdText">存儲過程的名字</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個對象</returns>
        public static object ExecuteScalarProducts(string cmdText, SqlParameter[] commandParameters)
        {
            return ExecuteScalar(SqlHelper.connectionString, CommandType.StoredProcedure, cmdText, commandParameters);
        }
        /// <summary>
        /// 返回第一行的第一列Sql語句專用
        /// </summary>
        /// <param name="cmdText">者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>返回一個對象</returns>
        public static object ExecuteScalarText(string cmdText, SqlParameter[] commandParameters)
        {
            return ExecuteScalar(SqlHelper.connectionString, CommandType.Text, cmdText, commandParameters);
        }
        /// <summary>
        /// Execute a SqlCommand that returns the first column of the first record against the database specified in the connection string 
        /// using the provided parameters.
        /// </summary>
        /// <remarks>
        /// e.g.:  
        ///  Object obj = ExecuteScalar(connString, CommandType.StoredProcedure, "PublishOrders", new SqlParameter("@prodid", 24));
        /// </remarks>
        /// <param name="connectionString">一個有效的數據庫連接字符串</param>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>An object that should be converted to the expected type using Convert.To{Type}</returns>
        public static object ExecuteScalar(string connectionString, CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            SqlCommand cmd = new SqlCommand();
            using (SqlConnection connection = new SqlConnection(connectionString))
            {
                PrepareCommand(cmd, connection, null, cmdType, cmdText, commandParameters);
                object val = cmd.ExecuteScalar();
                cmd.Parameters.Clear();
                return val;
            }
        }
        /// <summary>
        /// Execute a SqlCommand that returns the first column of the first record against an existing database connection 
        /// using the provided parameters.
        /// </summary>
        /// <remarks>
        /// e.g.:  
        ///  Object obj = ExecuteScalar(connString, CommandType.StoredProcedure, "PublishOrders", new SqlParameter("@prodid", 24));
        /// </remarks>
        /// <param name="connectionString">一個有效的數據庫連接字符串</param>
        /// <param name="cmdType">SqlCommand命令類型 (存儲過程， T-SQL語句， 等等。)</param>
        /// <param name="cmdText">存儲過程的名字或者 T-SQL 語句</param>
        /// <param name="commandParameters">以數組形式提供SqlCommand命令中用到的參數列表</param>
        /// <returns>An object that should be converted to the expected type using Convert.To{Type}</returns>
        public static object ExecuteScalar(SqlConnection connection, CommandType cmdType, string cmdText, SqlParameter[] commandParameters)
        {
            SqlCommand cmd = new SqlCommand();
            PrepareCommand(cmd, connection, null, cmdType, cmdText, commandParameters);
            object val = cmd.ExecuteScalar();
            cmd.Parameters.Clear();
            return val;
        }
        #endregion

        /// <summary>
        /// add parameter array to the cache
        /// </summary>
        /// <param name="cacheKey">Key to the parameter cache</param>
        /// <param name="cmdParms">an array of SqlParamters to be cached</param>
        public static void CacheParameters(string cacheKey, SqlParameter[] commandParameters)
        {
            parmCache[cacheKey] = commandParameters;
        }
        /// <summary>
        /// Retrieve cached parameters
        /// </summary>
        /// <param name="cacheKey">key used to lookup parameters</param>
        /// <returns>Cached SqlParamters array</returns>
        public static SqlParameter[] GetCachedParameters(string cacheKey)
        {
            SqlParameter[] cachedParms = (SqlParameter[])parmCache[cacheKey];
            if (cachedParms == null)
                return null;
            SqlParameter[] clonedParms = new SqlParameter[cachedParms.Length];
            for (int i = 0, j = cachedParms.Length; i < j; i++)
                clonedParms[i] = (SqlParameter)((ICloneable)cachedParms[i]).Clone();
            return clonedParms;
        }

        /// <summary>
        /// 檢查是否存在
        /// </summary>
        /// <param name="strSql">Sql語句</param>
        /// <returns>bool結果</returns>
        public static bool Exists(string strSql)
        {
            int cmdresult = Convert.ToInt32(ExecuteScalar(connectionString, CommandType.Text, strSql, null));
            if (cmdresult == 0)
            {
                return false;
            }
            else
            {
                return true;
            }
        }
        /// <summary>
        /// 檢查是否存在
        /// </summary>
        /// <param name="strSql">Sql語句</param>
        /// <param name="cmdParms">參數</param>
        /// <returns>bool結果</returns>
        public static bool Exists(string strSql, SqlParameter[] cmdParms)
        {
            int cmdresult = Convert.ToInt32(ExecuteScalar(connectionString, CommandType.Text, strSql, cmdParms));
            if (cmdresult == 0)
            {
                return false;
            }
            else
            {
                return true;
            }
        }
    }
}

本篇博客只涉及到添加數據 （insert into） 並陸續的更新其他SQL操作， 本人希望封裝一個全套基本的SQL操作。在以後如果從事後端可以在此擴展 ， 不喜勿噴。

本人希望用SqlParameter的方式來構建T-SQL

一 ： 構建基本的T-SQL（ 沒有SqlParameter參數註入 ）

using DBDome.model;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Reflection;
using System.Text;
namespace DBDome.com
{
    /// <summary>
    /// SQL構建器(還沒與賦值)
    /// </summary>
    public sealed class SQL_Structure
    {
        private SQL_Structure() { }
        /// <summary>
        /// 添加一個數據的T-SQL的構成
        /// </summary>
        /// <typeparam name="T"></typeparam>
        /// <param name="model"></param>
        /// <returns></returns>
        public static string ADD_T_SQL<T>( T model ) where T : BaseModel
        {
            string base_add = @"insert into [{0}] ({1}) values ({2})";//表名 ， 列明 ， 對應的值
            Type model_type = model.GetType();
            string[] arr = model_type.Name.Split(new char[] { ‘.‘ });
            string table_name = arr[arr.Length - 1];//獲得表的名稱
            PropertyInfo[] p_intos = model_type.GetProperties();
            StringBuilder table_field_name = new StringBuilder();
            StringBuilder table_field_value = new StringBuilder();
            PropertyInfo item = null;
            for (int i = 0; i < p_intos.Length; i++)
            {
                item = p_intos[i];
                if (item.Name != "id")//不應添加主鍵
                {
                    table_field_name.Append(item.Name + ",");
                    table_field_value.Append("@" + item.Name + ",");
                }
            }
            return String.Format(base_add, table_name, table_field_name.ToString().Substring(0, table_field_name.ToString().Length-1), table_field_value.ToString().Substring(0,table_field_value.ToString().Length-1));
        }
    }
}

二 ： 好了我現在構造與SQL表映射的模型類

①，所有model的基類：

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
namespace DBDome.model
{
    public abstract class BaseModel
    {
        protected int _id;
        /// <summary>
        /// 主鍵ID號
        /// </summary>
        public virtual int id
        {
            get { return this._id; }
            set { this._id = value; }
        }
    }
}

② ， 繼承model的一個類User也是我的一個SQL表名

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
namespace DBDome.model
{
    public sealed class User : BaseModel
    {
        public string name { get; set; }
        public short sex{ get; set; }
        public int lv{ get; set; }
        public string username{ get; set; }
        public string userpwd{ get; set; }
    }
}

三 ， 我們添加一條數據 ， 需要構建參數 SqlParameter[]

using DBDome.model;
using System;
using System.Collections.Generic;
using System.Data.SqlClient;
using System.Linq;
using System.Reflection;
using System.Text;
using System.Data;
namespace DBDome.com
{
    /// <summary>
    /// SqlParameter 構建
    /// </summary>
    public sealed class SqlParameter_Structure
    {
        private SqlParameter_Structure() { }
        /// <summary>
        /// 構建T-SQL參數 ADD
        /// </summary>
        /// <typeparam name="T"></typeparam>
        /// <param name="model"></param>
        /// <returns></returns>
        public static SqlParameter[] ADD_T_SQL<T>(T model) where T : BaseModel
        {
            Type model_type = model.GetType();
            PropertyInfo[] p_intos = model_type.GetProperties();
            SqlParameter[] sql_param = new SqlParameter[p_intos.Length - 1];//不需要主鍵
            PropertyInfo item = null;
            string p_name = "";
            SqlParameter cell = null;
            int j = 0;
            for (int i = 0; i < p_intos.Length; i++)
            {
                item = p_intos[i];
                p_name = item.Name;
                if (p_name == "id") continue;
               // Console.WriteLine("字段 {0} 的類型為 {1} ", p_name ,item.PropertyType);
                cell = new SqlParameter(p_name, SqlParameter_Structure.Get_SqlDbType_SqlType(item.PropertyType));
                cell.Value = item.GetValue(model, null);
                sql_param[j] = cell;
                j++;
            }
            return sql_param;
        }
        private static SqlDbType Get_SqlDbType_SqlType(Type cshaper)
        {
            string[] arr = cshaper.ToString().Split(new char[] { ‘.‘ });
            string toLow = arr[arr.Length - 1].ToLower();
            switch (toLow)
            { 
                case "string":
                    return SqlDbType.NVarChar;
                    break;
                case "int16":
                    return SqlDbType.Bit;
                    break;
                case "int32":
                    return SqlDbType.Int;
                    break;
                default:
                    throw new Exception(String.Format("T-SQL參數沒有配對的類型 {0}" ,cshaper));
                    break;
            }
        }
    }
}

本文出自 “Better_Power_Wisdom” 博客，請務必保留此出處http://aonaufly.blog.51cto.com/3554853/1943850

C# SQL封裝（一）