Question

Code:

com.CommandText = "select username, pass from Employees where lastName like '@Last' and firstName like '@First'";
com.Parameters.AddWithValue("@Last", lastName); // lastName is a method argument

SqlParameter param = new SqlParameter();
param.ParameterName = "@First";
param.Value = firstName;
com.Parameters.Add(param);

No matter what I do, the parameters are not inserted. What gives?

Answer 1

Do not put single quotes around your parameters, these are implied anyway.

Also, try using SqlCommand.CreateParameter as well:

com.CommandText = "select username, pass from Employees where lastName like @Last and firstName like @First";
com.Parameters.AddWithValue("@Last", lastName); // lastName is a method argument

SqlParameter param = com.CreateParameter();
param.ParameterName = "@First";
param.Value = firstName;
com.Parameters.Add(param);