syntax error

Question

0.00/5 (No votes)

See more:

The error was ( Syntax error in INSERT INTO statement. )

private void btnNext_Click(object sender, EventArgs e)
{
     OleDbConnection con1 = new OleDbConnection("Provider=Microsoft.ace.OLEDB.12.0;DATA Source=C:\\Users\\Ayoub\\Desktop\\nodes.mdb;user ID=admin ; Password = ;");
     OleDbCommand command = new OleDbCommand();
     command.Connection = con1;
     command.Connection.Open();
     command.CommandText = ("insert into configuration (Name,Title) values ('" + txtBxAdminName.Text + "','" + txtBoxNetworkTitle.Text + "'");
     command.CommandType = CommandType.Text;
     command.ExecuteScalar();
     //OleDbDataReader reader = command.ExecuteReader();
     // reader.Close();
     command.Connection.Close();
}

Can you please help me

Posted 28-Dec-09 4:23am

ayoub ezzo

Updated 28-Dec-09 4:55am

Nuri Ismail

v2

Add a Solution

2 solutions

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Jimmanuel · Answer 1 · 2009-12-28T04:40:00

Solution 1

1. close the parenthesis opened in the values list
2. Prevent SQL injection attacks: use parameterized queries[^].

Posted 28-Dec-09 4:40am

Jimmanuel

OriginalGriff · Answer 2 · 2009-12-28T05:34:00

To add to the previous answer, there is also a convention that SQL (etc.) keywords are capitalised. So your statement would become:

OleDbCommand command = new OleDbCommand("INSERT INTO configuration (Name, Title) VALUES (@AN, @NT)");
command.Parameters.AddWithValue("@AN", txtBxAdminName.Text);
command.Parameters.AddWithValue("@NT", txtBoxNetworkTitle.Text);

syntax error

2 solutions

Solution 1

Solution 2

Add your solution here

Preview 0

syntax error

2 solutions

Solution 1

Solution 2

Add your solution here

Preview 0

Existing Members

...or Join us