使用 OracleDataAdapter 的参数化查询

using System;
using Oracle.ManagedDataAccess.Client;

class Program
{
    static void Main(string[] args)
    {
        string connectionString = "Data Source=myserver;User Id=myusername;Password=mypassword;";
        string sql = "SELECT * FROM mytable WHERE id = :id";

        using (OracleConnection connection = new OracleConnection(connectionString))
        {
            connection.Open();

            using (OracleCommand command = new OracleCommand(sql, connection))
            {
                command.Parameters.Add(":id", OracleDbType.Int32).Value = 1;

                using (OracleDataReader reader = command.ExecuteReader())
                {
                    while (reader.Read())
                    {
                        Console.WriteLine(reader["column1"]);
                    }
                }
            }
        }
    }
}