Click here to Skip to main content
15,881,589 members
Articles / Web Development / ASP.NET
Article

ASP.NET Guestbook using MS Access

Rate me:
Please Sign up or sign in to vote.
3.32/5 (19 votes)
16 Mar 20042 min read 646.7K   6.1K   53   27
Shows an easy way of building a guestbook using ADO.NET and Access

Sample Image - myaspnetguestbook.jpg

Introduction

This project shows an easy way to create a guestbook built using ASP.NET. Access database is used to store the data. ADO.NET is used to access the data on the server. To format the data, I use the Repeater control that comes with Visual Studio .NET.

Background

The guestbook is split into two pages, one where the user can write in the guestbook and the other shows a log of all the guestbook entries.

Using the code

In order to be able to access data through a website, you'll have to include these two lines of code on every page you want to use data access methods:

VB
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Data.OleDB" %>

I'm first going to describe the one where the user writes to the guestbook. The code needed to create the connection to the database looks like this:

VB
sub OnBtnSendClicked (s As Object, e As EventArgs)
    Dim strConn as string = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" _ 
                                    & server.mappath("guestbook.mdb") & ";" 
    Dim MySQL as string = "INSERT INTO Guestbook " & _ 
       "(Name, EMail, URL, Comment) VALUES " & _
       "('" & txtName.Text & "','" & txtEMail.Text & "','" _ 
       & txtURL.Text & "','" & txtComment.Text & "')" 
    Dim MyConn as New OleDBConnection (strConn) 
    Dim cmd as New OleDBCommand (MySQL, MyConn) 
    MyConn.Open () 
    cmd.ExecuteNonQuery () 
    MyConn.Close () 
    Response.Redirect ("guestlog.aspx") 
end sub

This function executes when the user selects the "Send" button. It creates a connection with the server and then adds what the user typed in the form to the database, using the INSERT INTO statement. The txtName.Text retrieves the context of the Name field and adds it to the command. The other fields are retrieved exactly the same. You can see the code for the form in the source file, that comes with this article.

After the function has added the new record, the user is redirected to the log page, where he can see all the other entries in the guestbook. Now we are going to look at the page, that displays the entries of the guestbook (database).

This function executes whenever the page is loaded (or refreshed). It creates a connection with the database, and binds the data to the Repeater control. The Repeater control is formatted elsewhere in the file, a great way to separate data and logic.

VB
Sub Page_Load (Source As Object, E as EventArgs)
    Dim strConn as string = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" _ 
                                & server.mappath("guestbook.mdb") & ";"
    Dim MySQL as string = "SELECT Name, EMail, URL, Comment FROM Guestbook"
    Dim MyConn as New OleDBConnection (strConn)
    Dim Cmd as New OleDBCommand (MySQL, MyConn)
    MyConn.Open ()
    rptGuestbook.DataSource = _ 
      Cmd.ExecuteReader(System.Data.CommandBehavior.CloseConnection)
    rptGuestbook.DataBind()
End Sub

You can see the code for the Repeater in the source file, but one interesting thing that I used is to automatically create a link to the website the user provided in the form. That is done using the Hyperlink control that comes with Visual Studio .NET.

Points of Interest

I hope this article has shown you how easy it is to create a simple guestbook in a very short time. Of course, you may like to format the output differently. I didn't spend much time on the design of the interface, but instead concentrated on the logic. I haven't included any error checking, in order to make the code as simple as possible.

If you understand the theory behind this guestbook, you can move on to some more complex things using ASP.NET. I hope you enjoyed this as much as I have! - Good luck!

Update 16.03.2004

This article talks about the "Operation must use an updateable query" problem, that many people are having.

License

This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here



Comments and Discussions

 
GeneralError Code Pin
seangheng19-Jul-09 20:40
seangheng19-Jul-09 20:40 
GeneralASP.NET login page Pin
kholiwe4-Apr-07 22:28
kholiwe4-Apr-07 22:28 
GeneralRe: ASP.NET login page Pin
hafizakahbk24-Jul-07 15:46
hafizakahbk24-Jul-07 15:46 
QuestionHelp Pin
asifahaniff20-Aug-06 5:38
asifahaniff20-Aug-06 5:38 
GeneralBlank Log view page Pin
fredtbx19-Jan-06 4:08
fredtbx19-Jan-06 4:08 
GeneralRe: Blank Log view page Pin
Gabriel8219-Apr-07 11:23
Gabriel8219-Apr-07 11:23 
GeneralNext Page Pin
shlvy12-Aug-04 6:50
shlvy12-Aug-04 6:50 
GeneralSecurity Pin
Jeffrey Sax17-Mar-04 19:01
Jeffrey Sax17-Mar-04 19:01 
GeneralRe: Security Pin
Tony Truong18-Mar-04 12:40
Tony Truong18-Mar-04 12:40 
Using stored procedures won't completely stop SQL code injection.. What's to stop a user from entering sql statements inside the "message" input textbox. The sp is passed some parameters which it uses to build a SQL insert statement to insert a new row in the guestbook... Why can't a user close off the insert statement and than embedd an update or delete statement into the sp .. As long as the sp string is properly formated, than the sql statement(s) will be excuted...

Only proper user input parsing and filtering will solve the security risks you mention.
GeneralRe: Security Pin
Jeffrey Sax18-Mar-04 17:18
Jeffrey Sax18-Mar-04 17:18 
GeneralRe: Security Pin
Tony Truong22-Mar-04 8:28
Tony Truong22-Mar-04 8:28 
GeneralRe: Security Pin
Anonymous27-May-05 22:03
Anonymous27-May-05 22:03 
GeneralRunTimeError Pin
sashy28-Feb-04 5:39
sashy28-Feb-04 5:39 
GeneralRe: RunTimeError Pin
Dilbert20044-Mar-04 10:47
Dilbert20044-Mar-04 10:47 
GeneralAdding a search option to this Pin
dal20613-Apr-03 16:22
dal20613-Apr-03 16:22 
GeneralGot errors Pin
xiaosong17-Feb-03 16:52
xiaosong17-Feb-03 16:52 
GeneralRe: Got errors Pin
Dilbert200418-Feb-03 21:57
Dilbert200418-Feb-03 21:57 
GeneralRe: Got errors Pin
xiaosong19-Feb-03 11:11
xiaosong19-Feb-03 11:11 
GeneralRe: Got errors Pin
Anonymous14-Jun-03 8:01
Anonymous14-Jun-03 8:01 
GeneralRe: Got errors Pin
Anonymous14-Jun-03 8:16
Anonymous14-Jun-03 8:16 
GeneralRe: Got errors Pin
microsas8-Mar-04 3:41
microsas8-Mar-04 3:41 
GeneralRe: Got errors Pin
Dilbert200416-Mar-04 2:41
Dilbert200416-Mar-04 2:41 
GeneralOther similar articles Pin
Uwe Keim18-Jan-03 1:06
sitebuilderUwe Keim18-Jan-03 1:06 
Questionwrong category? Pin
Steve McLenithan17-Jan-03 9:48
Steve McLenithan17-Jan-03 9:48 
AnswerRe: wrong category? + ... Pin
Steve McLenithan17-Jan-03 9:51
Steve McLenithan17-Jan-03 9:51 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.