Database

12-Apr-13 7:13

I have a table named(information)tha has 3 columns(id,fnam,lnam)
I know that I can select an special row by

select form information (id,fname,lname)WHERE id="1"
////I want to do this for example:
string lname="last name witch it's id is "1"";
///and I want to access this  by table

plz help me!!!

RobCollins12-Apr-13 7:17

RobCollins

12-Apr-13 7:17

You're probabyl going to be just fine with this

SQL

SELECT id,fname,lname
FROM information
WHERE id = 1

sara-setare12-Apr-13 7:28

12-Apr-13 7:28

ok,but how can I access the fname as string ;
my code is like this:

<script>
protected void page_Load(object sender, EventArgs e)
{
//session["field3"] contains an Id from previous page
Id.Value = (string)Session["field3"];
} 
protected void salam(object sender,EventArgs e)
{
name.value="the row's name witch it's id is session["field3"]"


}
</script>
<html>
<input id="name"/>
<input id="Id"/>
</html>

do you undrestand me?

RobCollins12-Apr-13 7:59

RobCollins

12-Apr-13 7:59

Not really Frown | :(

Can you give me some more details on what specifically are you trying to do?

sara-setare12-Apr-13 19:44

12-Apr-13 19:44

ok,I put all of codes here!

///In the getid.aspx page
<pre><%@ Page Language="C#" AutoEventWireup="true" CodeBehind="authenticate1.aspx.cs" Inherits="hokm.Admin.authenticate1" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<script runat="server">
  
    
    protected void salam(object sender, EventArgs e)
    {
        Session["field1"] = sh1.Text;
        Response.Redirect("editinformation.aspx");
    }
        


</script>
<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
    <title></title>
</head>
<body>
    <form id="form1" runat="server" enctype="multipart/form-data" >
    <div dir="rtl">
    <table>
    <tr class="style1"> 
    <td  width="3%" bgcolor="#FF6666">
    Please enter your id number
        <br />
        <br />
        <asp:TextBox  name="shomare"  ID="sh1" runat="server"/>
        <br />
        <br />
        <asp:Button ID="Button1" Width="60" runat="server"  Text="confirm"  OnClick="salam" />
        </td>
        </tr>
        </table>
    </div>
    </form>
</body>
</html>

so I put the Id in session["field1"];
and in the editinformation.aspx

    protected void page_Load(object sender, EventArgs e)
    {
        sh.Value = (string)Session["field3"];
     
        
    }
<html>
<body>
<table>
 <td colspan="5">&nbsp;
             ID number:
            <input name="shomare karmandy"      disabled="disabled" id ="sh" runat="server" />
            </td>
<tr>
<td>
name:
<input name="name" id="sh2" disabled="disabled" runat="server"/>
</table>
</body>
</html>

you see that I have filled the id textbox with a value,and I want to do this with name input,but I dont know how should I use the database to access the name with this Id?????

update special row

sara-setare12-Apr-13 1:20

12-Apr-13 1:20

Hi all
I have a database named information and every row in this database has a unique id!
I want to update the row with the special id(that I have stored that id,for example it is in "ID" variable), but I dont know how should I use the select and update command to do this!
plz help me!

Tim Carmichael12-Apr-13 1:35

Tim Carmichael

12-Apr-13 1:35

Start by providing the statements you are trying to use; others can only guess at what the table looks like.

Shanalal Kasim12-Apr-13 3:11

Shanalal Kasim

12-Apr-13 3:11

Provide more details like table structure & sample data

David Mujica12-Apr-13 3:11

David Mujica

12-Apr-13 3:11

The basic update statement is

update <yourtable>
set <yourfield>=<yourvalue>
where <conditional>

You probably want something like "where ID = 5"

Without more details, this is the best I can do to help.

sara-setare12-Apr-13 3:50

12-Apr-13 3:50

ok,for example I have an information table with columns(id,fname,lnam) and I want to access the (fname,lnam) by Id,because I want to use them as string;
I know that I should the select command Like this:
select(id,fname,lname)WHERE id="" but I dont know how to access the fnam,lname with this Id as string!

the insert command doesnt work

Eddy Vluggen12-Apr-13 6:50

Eddy Vluggen

12-Apr-13 6:50

SQL

BEGIN TRANSACTION

CREATE TABLE Person
(
    ID INT IDENTITY(1,1) PRIMARY KEY,
    FIRSTNAME VARCHAR(50),
    LASTNAME VARCHAR(50)
)

INSERT INTO Person VALUES ('John', 'Doe'), ('Code', 'Project')

SELECT * 
  FROM Person
  
UPDATE Person
   SET FIRSTNAME = 'Peter'
 WHERE ID = 1
 
SELECT *
  FROM Person 

ROLLBACK

Execute in SQL-Management Studio. You'll see two tables; one before, and one after the update. You will need a good book that introduces you to some basic SQL-constructions.

Bastard Programmer from Hell Suspicious | :suss:

If you can't read my code, try converting it here[^]

sara-setare10-Apr-13 18:27

10-Apr-13 18:27

Hi all
I have a problem with database.I work on " add new user.aspx "file witch add a new user to the table(Authenticate)but it doesnt work! this is my code in add new user.aspx file:

<script runat="server">
protected void  CreateUserWizard1_CreatedUser(object sender, EventArgs e)
{
System.Data.SqlClient.SqlConnection con = new System.Data.SqlClient.SqlConnection();
string connectionstr=@"Data Source=.\SQLEXPRESS;AttachDbFilename=C:\Users\EHSAN\Documents\Visual Studio 2010\Projects\The Club\The Club\App_Data\Database1.mdf;Integrated Security=True;User Instance=True";
       con.ConnectionString=connectionstr;
       string sqlstring;
       sqlstring ="insert into Authenticate (username,password)VALUES ("+ CreateUserWizard1.UserName+","+CreateUserWizard1.Password+")";
       System.Data.SqlClient.SqlCommand objcommand = new System.Data.SqlClient.SqlCommand(sqlstring, con);
       Response.Redirect("~/Login.aspx");
}
</script>
<asp:Content ID="Content1" ContentPlaceHolderID="cphMain" Runat="server">
<asp:CreateUserWizard ID="CreateUserWizard1" Runat="server" 
        oncreateduser="CreateUserWizard1_CreatedUser">
</asp:CreateUserWizard>
</asp:Content>

I execute that but it doesnt add any new row to my table!!!!
plz help me!

PIEBALDconsult10-Apr-13 19:00

PIEBALDconsult

10-Apr-13 19:00

I suspect you need to put apostrophes around the values, but the better (much much better) solution is to use a parameterized command.

sara-setare10-Apr-13 19:14

10-Apr-13 19:14

thank you so much
but I dont know how should I use parameter!for example I have the CreateUserWizard1.UserName variable but I dont know how should use it as parameter! can you say me how should I do it?

Pallavi Waikar10-Apr-13 19:55

Pallavi Waikar

10-Apr-13 19:55

ur missing objcommand.ExecuteNonQuery(); and parenthesis in code
try this one

XML

<script runat="server">
protected void  CreateUserWizard1_CreatedUser(object sender, EventArgs e)
{
System.Data.SqlClient.SqlConnection con = new System.Data.SqlClient.SqlConnection();
string connectionstr=@"Data Source=.\SQLEXPRESS;AttachDbFilename=C:\Users\EHSAN\Documents\Visual Studio 2010\Projects\The Club\The Club\App_Data\Database1.mdf;Integrated Security=True;User Instance=True";
       con.ConnectionString=connectionstr;
       string sqlstring;
       sqlstring ="insert into Authenticate (username,password)VALUES ('"+ CreateUserWizard1.UserName+"','"+CreateUserWizard1.Password+"')";
       System.Data.SqlClient.SqlCommand objcommand = new System.Data.SqlClient.SqlCommand(sqlstring, con);
       Con.Open();
       objcommand.ExecuteNonQuery();
        Con.Close();
       Response.Redirect("~/Login.aspx");
}
</script>
<asp:Content ID="Content1" ContentPlaceHolderID="cphMain" Runat="server">
<asp:CreateUserWizard ID="CreateUserWizard1" Runat="server"
        oncreateduser="CreateUserWizard1_CreatedUser">
</asp:CreateUserWizard>
</asp:Content>

sara-setare10-Apr-13 20:19

10-Apr-13 20:19

thank you so much,it works
I had 2 mistake:
1:in insert command
2:in execute command
thank you so much again

Richard Deeming11-Apr-13 1:53

Richard Deeming

11-Apr-13 1:53

This version is still susceptible to SQL Injection[^]. For example, try a password of:

Robert');DROP TABLE Authenticate;--

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer