SqlException (0x80131904): Incorrect syntax near '('.

Question

1.00/5 (1 vote)

See more:

SQL

string s11 = "update SessionItem(ItemName,Quantity,Price,Date,Month) set ItemName='" + TextBox7.Text + "',Quantity='" + nb + "',Price='" + TextBox9.Text + "',Date='" + dt1 + "',Month='" + month1 + "' where ItemName='" + TextBox7.Text + "' ";
 SqlCommand cmdh = new SqlCommand(s11, DbConnection.mCon);
 cmdh.ExecuteNonQuery();

Posted 17-Dec-12 0:26am

ravuravu

Updated 17-Dec-12 0:28am

Krunal Rohit

v2

Add a Solution

Comments

Kiran Susarla 17-Dec-12 6:30am

I am assuming SessionItem is your table name. Why are you specifying the column names after SessionItem?

visnumca123 17-Dec-12 6:32am

string s11 = "update SessionItem set ItemName='" + TextBox7.Text + "',Quantity='" + nb + "',Price='" + TextBox9.Text + "',Date='" + dt1 + "',Month='" + month1 + "' where ItemName='" + TextBox7.Text + "' ";
SqlCommand cmdh = new SqlCommand(s11, DbConnection.mCon);
cmdh.ExecuteNonQuery();

ravuravu 17-Dec-12 6:36am

am specifying because of more fields in it,but am updating the selected fields so that am specifying the fields

ravuravu 17-Dec-12 6:41am

yes thats the correct way

ravuravu 17-Dec-12 6:42am

i correct it
thank u kiran and vishnumcal

Sanjay K. Gupta 17-Dec-12 6:53am

Hi ravuravu,
Please tell me who has taught you to pass SQL Parameters like this way???
I am searching for the person (or any source). Please.

ravuravu 18-Dec-12 6:17am

am a fresher am studying myself searching like net,books etc.its ma mistake,

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2012-12-17T00:33:00

The format of an UPDATE command is not the same as an INSERT:

SQL

UPDATE <table_name> SET <field>=<new value>,<field... WHERE ...

Having said that, do not concatenate strings to build a SQL command. It leaves you wide open to accidental or deliberate SQL Injection attack which can destroy your entire database. Use Parametrized queries instead.

[edit]Forgot to encode HTML, grr. - OriginalGriff[/edit]

"sir pls show an example for parameterized queries"

C#

using (SqlConnection con = new SqlConnection(strConnect))
    {
    con.Open();
    using (SqlCommand com = new SqlCommand("UPDATE myTable SET myColumn1=@C1, myColumn2=@C2 WHERE Id=@ID", con))
        {
        com.Parameters.AddWithValue("@ID", id);
        com.Parameters.AddWithValue("@C1", myValueForColumn1);
        com.Parameters.AddWithValue("@C2", myValueForColumn2);
        com.ExecuteNonQuery();
        }
    }

AshishChaudha · Answer 2 · 2012-12-17T20:13:00

SQL

string s11 = "update SessionItem set ItemName='" + TextBox7.Text + "',Quantity='" + nb + "',Price='" + TextBox9.Text + "',Date='" + dt1 + "',Month='" + month1 + "' where ItemName='" + TextBox7.Text + "' ";
 SqlCommand cmdh = new SqlCommand(s11, DbConnection.mCon);
 cmdh.ExecuteNonQuery();

Note: For better performance and security make a good habbit to use parameterized query.

Thanks

SqlException (0x80131904): Incorrect syntax near '('.

2 solutions

Solution 1

Solution 2

Add your solution here

Preview 0