Click here to Skip to main content
15,917,617 members
Home / Discussions / C#
   

C#

 
SuggestionRe: Use from dataReader to bind data to a data gridview Pin
Richard Deeming5-Mar-18 8:02
mveRichard Deeming5-Mar-18 8:02 
Member 13325846 wrote:
new OleDBCammand(“Select *From[“+txtBox1.Text+”]”,con)

That code is vulnerable to SQL Injection[^]. Unfortunately, there's no easy way to fix it, since you can't use a parameter as a table name.

Rather than letting the user type in any table name, it would be better to give them a drop-down list of tables to choose from. After all, not every table in your database is going to have Id and Name columns.

It would also be better to only load the specific columns you need, rather than using SELECT * FROM ...



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer


GeneralRe: Use from dataReader to bind data to a data gridview Pin
Member 1332584616-Mar-18 1:45
Member 1332584616-Mar-18 1:45 
Questiona simpler binding technique for WinForms ? request for code review Pin
BillWoodruff1-Mar-18 2:22
professionalBillWoodruff1-Mar-18 2:22 
AnswerRe: a simpler binding technique for WinForms ? request for code review Pin
Richard Deeming1-Mar-18 3:49
mveRichard Deeming1-Mar-18 3:49 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
BillWoodruff1-Mar-18 7:27
professionalBillWoodruff1-Mar-18 7:27 
AnswerRe: a simpler binding technique for WinForms ? request for code review Pin
Eddy Vluggen1-Mar-18 9:23
professionalEddy Vluggen1-Mar-18 9:23 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
BillWoodruff1-Mar-18 23:53
professionalBillWoodruff1-Mar-18 23:53 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
Eddy Vluggen2-Mar-18 4:20
professionalEddy Vluggen2-Mar-18 4:20 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
BillWoodruff2-Mar-18 4:58
professionalBillWoodruff2-Mar-18 4:58 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
Eddy Vluggen2-Mar-18 5:18
professionalEddy Vluggen2-Mar-18 5:18 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
BillWoodruff2-Mar-18 6:33
professionalBillWoodruff2-Mar-18 6:33 
QuestionRe: a simpler binding technique for WinForms ? request for code review Pin
Eddy Vluggen2-Mar-18 8:27
professionalEddy Vluggen2-Mar-18 8:27 
AnswerRe: a simpler binding technique for WinForms ? request for code review Pin
BillWoodruff4-Mar-18 14:50
professionalBillWoodruff4-Mar-18 14:50 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
Eddy Vluggen5-Mar-18 1:30
professionalEddy Vluggen5-Mar-18 1:30 
AnswerRe: a simpler binding technique for WinForms ? request for code review Pin
Gerry Schmitz2-Mar-18 6:20
mveGerry Schmitz2-Mar-18 6:20 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
BillWoodruff2-Mar-18 6:27
professionalBillWoodruff2-Mar-18 6:27 
GeneralRe: a simpler binding technique for WinForms ? request for code review Pin
Gerry Schmitz2-Mar-18 6:43
mveGerry Schmitz2-Mar-18 6:43 
QuestionNeed to export data from sql server to excel sheet in windows application Pin
Shankar M28-Feb-18 23:36
Shankar M28-Feb-18 23:36 
AnswerRe: Need to export data from sql server to excel sheet in windows application Pin
Richard MacCutchan28-Feb-18 23:56
mveRichard MacCutchan28-Feb-18 23:56 
GeneralRe: Need to export data from sql server to excel sheet in windows application Pin
Shankar M1-Mar-18 0:07
Shankar M1-Mar-18 0:07 
AnswerRe: Need to export data from sql server to excel sheet in windows application Pin
Gerry Schmitz1-Mar-18 8:01
mveGerry Schmitz1-Mar-18 8:01 
QuestionHow can i get the json data in to c# object Pin
Member 1370260728-Feb-18 18:20
Member 1370260728-Feb-18 18:20 
AnswerRe: How can i get the json data in to c# object Pin
Eddy Vluggen1-Mar-18 9:33
professionalEddy Vluggen1-Mar-18 9:33 
QuestionHow to open P to P Conference system in VB community? Pin
Member 1370237428-Feb-18 14:42
Member 1370237428-Feb-18 14:42 
AnswerRe: How to open P to P Conference system in VB community? Pin
Dave Kreskowiak28-Feb-18 15:27
mveDave Kreskowiak28-Feb-18 15:27 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.