Hi I Have An Error In Default.Aspx.Cs

Question

0.00/5 (No votes)

See more:

error

Line 18: string checkuser="select count(*) from UserData where User Name='" +TextBoxUN.Text + "'";
Line 19: SqlCommand com = new SqlCommand(checkuser, con);
Line 20: int temp = Convert.ToInt32(com.ExecuteScalar().ToString());
Line 21: if (temp == 1)
Line 22: {

Posted 26-Feb-14 0:52am

harshavardhan12345678

Add a Solution

Comments

Kornfeld Eliyahu Peter 26-Feb-14 6:56am

And the error is?

harshavardhan12345678 26-Feb-14 7:00am

SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["RegistrationConnectionString"].ConnectionString);
con.Open();
string checkuser="select count(*) from UserData where UserName='" +TextBoxUN.Text + "'";
SqlCommand com = new SqlCommand(checkuser, con);
int temp = Convert.ToInt32(com.ExecuteScalar().ToString ());
if (temp == 1)

Kornfeld Eliyahu Peter 26-Feb-14 7:02am

You show your code, and that's fine but where and what the error is?!

harshavardhan12345678 26-Feb-14 7:03am

error is in line 20

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2014-02-26T01:01:00

Two things, OK, three things...
1) When you report a problem TELL US WHAT THE PROBLEM IS. That means, if you get an error message, tell us what the message is, and where it occurs - otherwise we are just guessing...
2) Never do that: Do not concatenate strings to build a SQL command. It leaves you wide open to accidental or deliberate SQL Injection attack which can destroy your entire database. Use Parametrized queries instead. Particularly in a Web application, and in your login code...I could destroy your database from the other side of the world, without giving you any information about me...
3) Why are you converting an integer value to a string, in order to convert it right back to an integer again?

There is a very good chance that fixing (2) above will fix your problem...

Sanket Saxena · Answer 2 · 2014-02-26T01:54:00

Solution 2

Instead Line 20: int temp = Convert.ToInt32(com.ExecuteScalar().ToString());

Use

int temp = com.ExecuteScalar();

Posted 26-Feb-14 1:54am

Sanket Saxena