insert table values Db using .net C#

<pre lang="c#">SqlCommand cmd = new SqlCommand("insert into technicalregistration values('" + txttechid.Text + "','" + txtname.Text + "','" + txtloginName.Text + "','" + txtpwd.Text + "','" + txtphoneno.Text + "','" + txtemail.Text + "','" + txteducation.Text + "','" + txtExperience.Text + "','" + txtaddress.Text + "','" + txtCountry.Text + "','" + txtpincode.Text + "','" + Doj + "')", (SqlConnection)Application.Get("con"));
cmd.ExecuteNonQuery();
lblmessage.Text = "Submited Successfully";</pre>


Remainning Update Delete u analize this code and write ok



Regards,

Anilkumar.D

Hi,

You should check out some articles on Google about this, but here's a quick example:

SqlConnection connection = new SqlConnection(connectionString);
SqlCommand cmd = new SqlCommand("SELECT Table1.Field1 FROM [dbo].[Table1] WHERE Table1.Field2 = @Field2", connection); //@Field2 is a parameter

//This is where you set the @Field2 parameter value.
cmd.Parameters.Add("@Field2", SqlDbType.NVarChar).Value = your_criteria;

cmd.CommandType = CommandType.Text

SqlDataReader reader = cmd.ExecuteReader();
while (reader.Read())
{
    ...
    ...
    ...
}

This way, you are Sql Injection Attacks free, and you have an 'elegant' solution.

Hope it helps...

hi prerak,
thanks to other soloutions,
i think that it will be helpful.

first of all you should do this:

using system.data.sqlclient();

This code is for insert to table :

private void button1_Click(object sender, EventArgs e) 
{ 
SqlConnection conection = new SqlConnection("Data Source=.;Initial Catalog=YOUR DATABASE NAME;Integrated Security=True;");
string Sql_Insert=("INSERT INTO YOUR TABLE NAME VALUES(@id, @fname, @lname)");
conection.Open(); 
try 
{ 
SqlCommand comand = new SqlCommand(Sql_Insert, conection); 
comand.Parameters.AddWithValue("@id", textBox1.Text); 
comand.Parameters.AddWithValue("@fname", textBox2.Text); 
comand.Parameters.AddWithValue("@lname", textBox3.Text); 
comand.ExecuteNonQuery();             
} 
catch(System.Data.SqlClient.SqlException ex) 
{ 
MessageBox.Show(ex.ToString()); 
} 
finally  
{ 
conection.Close(); 
} 
}

This code is for select from table :

private void button1_Click(object sender, EventArgs e) 
{ 
SqlConnection conection = new SqlConnection("Data Source=.;Initial Catalog=YOUR DATABASE NAME;Integrated Security=True;");
string Sql_Select=("SELECT * FROM YOUR TABLE NAME");
conection.Open(); 
try 
{ 
SqlCommand comand = new SqlCommand(Sql_Select, conection); 
comand.ExecuteNonQuery();             
} 
catch(System.Data.SqlClient.SqlException ex) 
{ 
MessageBox.Show(ex.ToString()); 
} 
finally  
{ 
conection.Close(); 
} 
}

And etc.
I hope this is useful for you.