Comments by Łukasz Szeszycki (Top 4 by date)

protected void dodaj_Click(object sender, EventArgs e)
{

string ConnectionString = "Data Source= (LocalDB)\\MSSQLLocalDB;AttachDbFilename=|DataDirectory|dane.mdf;";
string sql;
int row;
int ros;
using (SqlConnection con = new SqlConnection(ConnectionString))
{
// sql query
if (sezon.SelectedValue == "2020/21")
{

sql = "select count(*) from zapasy_2020-21 where login='" + Context.User.Identity.Name + "' and odmiana='" + odmiany.SelectedValue + "'";
SqlCommand cmd = new SqlCommand(sql, con);

con.Open();
ros = (int)cmd.ExecuteScalar();

con.Close();

if (ros > 0)
{
sql = "select ilosc from zapasy_2020-21 where login='" + Context.User.Identity.Name + "' and odmiana='" + odmiany.SelectedValue + "'";
SqlCommand cmq = new SqlCommand(sql, con);
con.Open();
int ilo = (int)cmq.ExecuteScalar();
con.Close();

sql = "insert into zapasy_2020-21 values (@ilosc) where login='" + Context.User.Identity.Name + "' and odmiana='" + odmiany.SelectedValue + "'";
con.Open();
SqlCommand cma = new SqlCommand(sql, con);
string y = TextBox1.Text;
int z;
z = int.Parse(y);

SqlParameter paramName = new SqlParameter();
paramName.ParameterName = "@ilosc";
paramName.Value = ilo + z;

cma.Parameters.AddWithValue("ilosc", paramName);


int i = cma.ExecuteNonQuery();
con.Close(); // connection close

}
else
{




sql = "insert into zapasy_2020-21 values (@login,@odmiana,@ilosc)";
con.Open();
SqlCommand cmk = new SqlCommand(sql, con);
string y = TextBox1.Text;
int z;
z = int.Parse(y);
cmk.Parameters.AddWithValue("login", Context.User.Identity.Name);
cmk.Parameters.AddWithValue("odmiana", odmiany.SelectedValue);
cmk.Parameters.AddWithValue("ilosc", z);

int i = cmk.ExecuteNonQuery();
con.Close(); // connection close


}
}


else
{
sql = "select count(*) from zapasy_2021-22 where login='" + Context.User.Identity.Name + "' and odmiana='" + odmiany.SelectedValue + "'";
SqlCommand cmw = new SqlCommand(sql, con);

con.Open();
row = (int)cmw.ExecuteScalar();
// cast into integer and executescalar() get single value from database.
con.Close(); // connection close

if (row > 0)
{
sql = "select ilosc from zapasy_2021-22 where login='" + Context.User.Identity.Name + "' and odmiana='" + odmiany.SelectedValue + "'";
con.Open();
SqlCommand cmp = new SqlCommand(sql, con);
int ilo = (int)cmp.ExecuteScalar();
con.Close();

sql = "insert into zapasy_2020-21 values (@ilosc) where login='" + Context.User.Identity.Name + "' and odmiana='" + odmiany.SelectedValue + "'";
con.Open();