Data type mismatch in criteria expression

Question

0.00/5 (No votes)

See more:

hi
sir am inserting image path in ms access database inserted successfully but when am trying to update or display image its always saying that Data type mismatch in criteria expression
hear is my code

VB

Private Sub imageshow()
        con.Open()
        Dim cmd As New OleDbCommand("select alumni_imagepath from alumnidata where sl1='" & txtsl.Text & "'", con)
        Dim path As String = cmd.ExecuteScalar().ToString()
        ImageMap1.ImageUrl = path
        con.Close()
    End Sub

please help me sir m not getting any thing

hear is the image
http://tinypic.com/r/15s6dg9/6[^]

Posted 26-Oct-12 21:36pm

ambalgevishal

Updated 26-Oct-12 21:42pm

v2

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2012-10-26T22:06:00

What it is complaining about is the WHERE clause: the "criteria expression".

Firstly, look at the content of txtsl.Text - what is it? Compare that with the datatype of the column "sl1" - because that is what SQL is trying to convert it to. So if txtsl.Text is "Hello" and "sl1" is an integer field, it is going to complain that it can't convert the string to an integer.

Secondly, don't ever do that! Do not concatenate strings to build a SQL command. It leaves you wide open to accidental or deliberate SQL Injection attack which can destroy your entire database. Use Parametrized queries instead.