How to properly insert data into SQL table from Powershell?

Question

SQL

Good day.
How to correctly insert data into a table using Powershell

Code example:

function Invoke-SQL {
    Param(
        [string]$DataSource,
        [string]$Database,
        [string]$SqlCommand,
        [string]$User,
        [string]$Password
    )
    if (($User) -and ($Password)) {
        $connectionString = "Data Source=$dataSource;User ID=$User;Password=$Password;Initial Catalog=$Database"
    } else { 
        $connectionString = "Data Source=$dataSource; " + "Integrated Security=SSPI; " + "Initial Catalog=$database"
     }
    $connection = new-object system.data.SqlClient.SQLConnection($connectionString)
    $command = new-object system.data.sqlclient.sqlcommand($sqlCommand,$connection)
    $connection.Open()
    $adapter = New-Object System.Data.sqlclient.sqlDataAdapter $command
    $dataset = New-Object System.Data.DataSet
    $adapter.Fill($dataSet) | Out-Null
    $connection.Close()
    $dataSet.Tables
}
$date = Get-Date -Format MM/dd/yyyy
$zeit = Get-Date -Format HH:mm

echo $date , $zeit , $Env:USERNAME

Invoke-SQL -dataSource PC-EKOTOV\SQLEXPRESS -database Login -sqlCommand "INSERT INTO login VALUES ($Env:USERNAME, $date, $zeit, '0');"

On execution, a date conversion error occurs.

Answer 1

the simplest is to use $command.Parameter, rather than invent your own sql injections.
And, if you're doing an INSERT, don't bother with an Adapter, it's for a SELECT. You need
executenonquery