Click here to Skip to main content
15,888,069 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
Hi,
My code is in C# Asp.net is,

C#

C#
con.Open();

                string qry1 = "select top 1 a.coursename,a.name,a.feespaid,a.admissionid,b.invoicenumber from tb_studentfees a inner join tb_invoice b on a.admissionid=b.admissionid where a.admissionid="+ lbladmissionnumber.Text +" order by b.invoicenumber desc";
                SqlCeDataAdapter da1 = new SqlCeDataAdapter(qry1, con);
                DataTable dt = new DataTable();
                da1.Fill(dt);
                if (dt.Rows.Count > 0)
                {


I run this query successfully in MSSQL,but showing error

"There was an error parsing the query. [ Token line number = 1,Token line offset = 12,Token in error = 1 ] "


in SQL Server compact.

Please help.
Posted
Comments
Richard Deeming 18-Aug-15 8:18am    
Your code is vulnerable to SQL Injection[^].

NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.

1 solution

Try
select top (1) ...

See MS reference[^]
 
Share this answer
 

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900