VB.NET MySQL操作报fill: SelectCommand connection未初始化错误如何修复

你遇到的fill: SelectCommand connection property has not been initialized报错，核心原因是MySQL命令对象没有绑定有效的数据库连接实例，同时代码还存在SQL拼接错误、SQL注入风险等隐性问题，按以下方式修正即可：

核心错误点 #

• 拼接SQL语句时错误将连接对象标识, connection拼进了SQL文本内容，连接对象不属于SQL语句的组成部分
• 初始化MySqlCommand时没有传入已配置的数据库连接实例，命令对象无法确定要操作的数据库
• 所有筛选条件直接将VB变量名写进SQL语句，MySQL无法识别这些变量，执行会报错
• 筛选条件未做参数化处理，存在SQL注入风险
• 执行查询前没有打开数据库连接

修正后代码 #

Dim SiparisOnayi As String
Dim SiparisDurumu As String
Dim SiparisIli As String
Dim SiparisOdemeYontemi As String
Dim SiparisKargoFirmasi As String
Dim SiparisSatisKanali As String
' 补全缺失的变量定义
Dim SiparisKullanicisi As String
Dim a1, a2, a3, a4, a5, a6, a7, soncom As String

If ComboBox1.Text = Nothing Then
    a1 = Nothing
Else
    SiparisOnayi = ComboBox1.Text
    a1 = " and Siparis_Onay = @SiparisOnayi"
End If

If ComboBox2.Text = Nothing Then
    a2 = Nothing
Else
    SiparisDurumu = ComboBox2.Text
    a2 = " and Siparis_Durumu = @SiparisDurumu"
End If

If ComboBox3.Text = Nothing Then
    a3 = Nothing
Else
    SiparisIli = ComboBox3.Text
    a3 = " and Musteri_IL = @SiparisIli"
End If

If ComboBox4.Text = Nothing Then
    a4 = Nothing
Else
    SiparisKullanicisi = ComboBox4.Text
    a4 = " and Kullanici_Kodu = @SiparisKullanicisi"
End If

If ComboBox5.Text = Nothing Then
    a5 = Nothing
Else
    SiparisOdemeYontemi = ComboBox5.Text
    a5 = " and Odeme_Yontemi = @SiparisOdemeYontemi"
End If

If ComboBox6.Text = Nothing Then
    a6 = Nothing
Else
    SiparisKargoFirmasi = ComboBox6.Text
    a6 = " and Kargo_Adi = @SiparisKargoFirmasi"
End If

If ComboBox7.Text = Nothing Then
    a7 = Nothing
Else
    SiparisSatisKanali = ComboBox7.Text
    a7 = " and Satis_Kanali = @SiparisSatisKanali"
End If
' 移除错误拼接的连接字符串片段
soncom = "SELECT * FROM `Siparisler` WHERE `Siparis_Tarihi` BETWEEN @d1 and @d2" & a1 & a2 & a3 & a4 & a5 & a6 & a7

Try
    ' 先打开数据库连接
    myconnection.Open()
    ' 初始化命令对象时传入连接实例
    Dim command As New MySqlCommand(soncom, myconnection)
    command.Parameters.Add("@d1", MySqlDbType.DateTime).Value = DateTimePicker2.Value
    command.Parameters.Add("@d2", MySqlDbType.DateTime).Value = DateTimePicker3.Value
    
    ' 追加筛选条件参数
    If Not String.IsNullOrEmpty(a1) Then command.Parameters.Add("@SiparisOnayi", MySqlDbType.VarChar).Value = SiparisOnayi
    If Not String.IsNullOrEmpty(a2) Then command.Parameters.Add("@SiparisDurumu", MySqlDbType.VarChar).Value = SiparisDurumu
    If Not String.IsNullOrEmpty(a3) Then command.Parameters.Add("@SiparisIli", MySqlDbType.VarChar).Value = SiparisIli
    If Not String.IsNullOrEmpty(a4) Then command.Parameters.Add("@SiparisKullanicisi", MySqlDbType.VarChar).Value = SiparisKullanicisi
    If Not String.IsNullOrEmpty(a5) Then command.Parameters.Add("@SiparisOdemeYontemi", MySqlDbType.VarChar).Value = SiparisOdemeYontemi
    If Not String.IsNullOrEmpty(a6) Then command.Parameters.Add("@SiparisKargoFirmasi", MySqlDbType.VarChar).Value = SiparisKargoFirmasi
    If Not String.IsNullOrEmpty(a7) Then command.Parameters.Add("@SiparisSatisKanali", MySqlDbType.VarChar).Value = SiparisSatisKanali

    Dim table As New DataTable
    Dim adapter As New MySqlDataAdapter(command)
    adapter.Fill(table)
    DataGridView1.DataSource = table
    Label12.Text = "Toplam " & table.Rows.Count & " Kayıt bulundu ve gösteriliyor."
Catch ex As Exception
    MessageBox.Show(ex.Message)
Finally
    ' 确保连接无论是否报错都能关闭
    If myconnection.State = ConnectionState.Open Then myconnection.Close()
End Try

补充说明 #

把代码里的MySqlDbType.VarChar换成你对应数据库字段的实际类型即可正常运行，Finally块的逻辑保证了连接不会因为报错出现一直占用的情况。

内容的提问来源于stack exchange，提问作者Emre