Database

<br />
"[firstName] = '" + firstname.Text + "'",<br />

<br />
"[firstName] = '" + firstname.Text.Replace("'", "''") + "'",<br />

private void update_Click(object sender, System.EventArgs e)
{
	int prim = Convert.ToInt32(Request.Params["id"]);
	string sql = "SELECT [id],[firstName],[lastName],[emailPrim],[emailSec],[company],[jobTitle],[businessPhone]," +
		" [homePhone],[mobilePhone],[businessFax],[homeFax],[website],[msnAddy],[birthday],[addressHomeSt]," +
		" [addressHomeCity],[addressHomeState],[addressHomeZip],[addressBizSt],[addressBizCity],[addressBizState]," +
		" [addressBizZip],[nickname] FROM [MYdotNET_addressbook] WHERE [id] = " + prim;
	DataSource db = new DataSource();
	SqlConnection conn = new SqlConnection(db.DbString);
	SqlDataAdapter da = new SqlDataAdapter();
	

	da.SelectCommand = new SqlCommand(sql,conn);

	// Create an instance of a DataSet, and retrieve data from the addressbook table.
	DataSet ds = new DataSet("addressBook");
	da.FillSchema(ds,SchemaType.Source,"addressBook");
	da.Fill(ds,"addressBook");
	
	// create a new DataTable with the same schema as
	// the addressBook database table
	DataTable addressBook = ds.Tables["addressBook"];
	// create a new empty row with the addressBook schema
	DataRow drCurr = addressBook.NewRow();
	
	// EDIT Start the DataRow
	drCurr = addressBook.Rows[0];
	drCurr.BeginEdit();
	drCurr["firstName"] = firstname.Text;
	drCurr["lastName"] = lastname.Text;
	drCurr["emailPrim"] = emailprim.Text;
	drCurr["emailSec"] = emailsec.Text;
	drCurr["company"] = company.Text;
	drCurr["jobTitle"] = jobtitle.Text;
	drCurr["businessPhone"] = bphone.Text;
	drCurr["homePhone"] = hphone.Text;
	drCurr["mobilePhone"] = mobilephone.Text;
	drCurr["businessFax"] = bfax.Text;
	drCurr["homeFax"] = hfax.Text;
	drCurr["website"] = website.Text;
	drCurr["msnAddy"] = msnaddy.Text;
	drCurr["birthday"] = birthday.Text;
	drCurr["addressHomeSt"] = hst.Text;
	drCurr["addressHomeCity"] = hcity.Text;
	drCurr["addressHomeState"] = hstate.Text;
	drCurr["addressHomeZip"] = hzip.Text;
	drCurr["addressBizSt"] = bstreet.Text;
	drCurr["addressBizCity"] = bcity.Text;
	drCurr["addressBizState"] = bstate.Text;
	drCurr["addressBizZip"] = bzip.Text;
	drCurr["nickname"] = nickname.Text;

	//EDIT End
	drCurr.EndEdit();
	
	// create a command builder
	SqlCommandBuilder sqlCB = new SqlCommandBuilder(da);
	// get the update command and execute it.
	da.UpdateCommand = sqlCB.GetUpdateCommand();
	da.Update(ds,"addressBook");
	
	// send success message - kind of pointless since it says 
	// it is succssful when it is not
	Response.Write("changes Successfull");
}

string sql = @"UPDATE 
    MYdotNET_addressbook
SET 
    [firstName] = @FirstName,
    [lastName] = @LastName,
    ...
WHERE 
    id = @ID";
    
SqlCommand cmd = new SqlCommand(sql, conn);
cmd.Parameters.Add("@ID", Convert.ToInt32(Request.Params["id"]);
cmd.Parameters.Add("@FirstName", firstname.Text);
cmd.Parameters.Add("@LastName", lastname.Text);
...
cmd.ExecuteNonQuery();

<br />
Select b.Name as QueryName, a.Name1 as TableName<br />
From MSysQueries a<br />
INNER JOIN MSysObjects<br />
ON a.ObjectID = b.ID<br />
WHERE a.Attribute = 5<br />