How do I search mysql database and show the result on a textbox in VB.NET

Question

1.00/5 (1 vote)

See more:

Hi can you help me out on how i should start out with this?

so i have a textbox wherein i will type a code and it should search that code under "Code" column on mysql database and return the text under "item" column corresponding on the code entered.

What I have tried:

I tried starting this but im not sure how to continue it

MysqlConn = New MySqlConnection
        Dim Reader As MySqlDataReader

        MysqlConn.ConnectionString = "xxxxxx; user id=xxxxxx; password=xxxxxx; database=xxxxxx"

        Try
            MysqlConn.Open()
            Dim trial As String
            trial = "select * from sql12305518.Office_Items where ALP='" & Label3.Text & "' "
            COMMAND = New MySqlCommand(trial, MysqlConn)
            Reader = COMMAND.ExecuteReader

Posted 15-Nov-20 15:10pm

Member 14122214

Updated 15-Nov-20 17:28pm

Add a Solution

Comments

Richard Deeming 16-Nov-20 3:45am

Your code is almost certainly vulnerable to SQL Injection[^]. NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.

Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

kgmmurugesh · Accepted Answer · 2020-11-15T17:28:00

Solution 1

While reader.Read
      text1.text = Reader.GetString(0)
End While
reader.Close()

Posted 15-Nov-20 17:28pm

kgmmurugesh

Comments

Member 14122214 16-Nov-20 0:29am

you are a genius kgmmurugesh!