C# Discussion Boards - CodeProject

View All Threads

First Prev Next

Working with data base

columbos1492722-Dec-12 4:26

columbos14927

22-Dec-12 4:26

Hello,
Im doing a big final project that manages a dive shop.
This application will have data base.
What im looking for is some example of solution that works with data base(connect to DB , SQL , Query) that i can take and modify it for my needs.

Thanks.

Re: Working with data base

PIEBALDconsult22-Dec-12 5:07

PIEBALDconsult

22-Dec-12 5:07

I can offer you some insight into creating a Data Access Layer.
DatabaseAccessor[^]
There are many similar articles on here.

Re: Working with data base

SledgeHammer0122-Dec-12 9:38

SledgeHammer01

22-Dec-12 9:38

I understand that article is from 2007, but I'd completely disregard it. It was completely bad practice even "back then". Definitely is horrible practice today. Use a proper data access layer like EF, nHibernate, etc. At the very least, if you use barebones ADO.NET, you should not write queries in the C# code like that. Completely vulnerable to a script kiddie who knows SQL injection.

Re: Working with data base

PIEBALDconsult22-Dec-12 12:58

PIEBALDconsult

22-Dec-12 12:58

SledgeHammer01 wrote:
Completely vulnerable to a script kiddie who knows SQL injection

Bullshit -- it fully and easily supports parameters so there's no reason a developer has to leave himself open to that.

SledgeHammer01 wrote:
EF, nHibernate, etc

And what do you think they do in the background? Exactly the same things I do. Everything has to go through a command and connection eventually; I cut out the middle man. Additionally, those tools may not support whatever database the OP has to use, whereas there is probably an ADO.net connector for it.

Re: Working with data base

jschell22-Dec-12 14:05

jschell

22-Dec-12 14:05

SledgeHammer01 wrote:
It was completely bad practice even "back then".

Nonsense.

SledgeHammer01 wrote:
you should not write queries in the C# code like that. Completely vulnerable to a script kiddie who knows SQL injection.

You and I must have completely different definitions of SQL injection then.

I don't see anything in there that suggests anything at all like that.

Re: Working with data base

Simon_Whale23-Dec-12 0:05

Simon_Whale

23-Dec-12 0:05

Most of the ORM providers are bult upon ADO.NET.

but personally I dont think there is anything wrong with using ADO.NET, SQL Injection is only possible when there is a lack of parameterised queries.

Lobster Thermidor aux crevettes with a Mornay sauce, served in a Provençale manner with shallots and aubergines, garnished with truffle pate, brandy and a fried egg on top and Spam - Monty Python Spam Sketch

Re: Working with data base

Abhinav S25-Dec-12 4:49

Abhinav S

25-Dec-12 4:49

Just do a search in the articles section on this site.
There are a number of good samples and articles here.

WP7.5 Apps - XKCD | Calvin | SMBC | Sound Meter | Speed Dial

Last Visit: 31-Dec-99 18:00 Last Update: 24-Apr-24 1:08

Refresh

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.