Android Question How to rewrite the sentence 'sqlstr='?

[bskotu555]

ar=ReadFile(Dir,FileName)    '转成二进制
        Dim cx As String = phone.GetSettings ("android_id")'获取设备ID
        Dim tx As String=EditText1.Text'价格
        Dim tt As String=DateTime.Date(DateTime.Now)'时间
        sqlstr = "insert into 记录表(设备ID,账单图片,账单价格,记录日期) values('" & cx & "','" & ar & "','" & tx & "','" & tt & "')"
        Starter.Mysql_Jdbc.ExecNonQuery(sqlstr)

How to rewrite the sentence 'sqlstr=' to implement binary array ar upload to MYSQL database (database connection box database fields have been configured)?

 

[Jeffrey Cameron]

Start here: https://www.b4x.com/android/forum/threads/sql-tutorial.6736/#content

And specifically the parameterized query syntax:

SQL1.ExecNonQuery2("INSERT INTO table1 VALUES(?, ?, ?)", Array As Object("def", 3, 4))

 

[MicroDrie]

And use smartstring and play with single and doublet quote.