delete record from sql server with two variables

Question

0.00/5 (No votes)

See more:

hi to all!

i have a table with
item1
item2
item3
item4
item5

from c sharp i have to delete one record by passing two variables
i make it like this problem is of and, i use comma still there is error can u tell me how to handle it

("DELETE FROM [database].[table] WHERE item1=" + Int1+ " and "item2="+Int2)

Posted 7-Sep-11 20:58pm

kami124

Add a Solution

3 solutions

Solution 3

Try this:

C#

string delquery="Delete * From [database].[table] Where item1 = ? And item2 = ?";

OleDbCommand cmd = new OleDbCommand(delquery, conn);

cmd.CommandType = CommandType.Text;

    cmd.Parameters.AddWithValue("item1", Int1);

    cmd.Parameters.AddWithValue("item2", Int2);

    conn.Open();

    cmd.ExecuteNonQuery();

remember always use parametrized query or stored procedures to avoid sql-injection attacks.

hope it helps :)

for further queries comment here!

Posted 7-Sep-11 21:19pm

Uday P.Singh

Comments

RaviRanjanKr 8-Sep-11 3:23am

My 5+

Uday P.Singh 8-Sep-11 3:24am

thanks Ravi :)

nagendrathecoder 8-Sep-11 3:28am

Good answer, my 5

Uday P.Singh 8-Sep-11 5:34am

thanks nagendra:)

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

nagendrathecoder · Accepted Answer · 2011-09-07T21:05:00

Solution 2

If items are string datatype then you need to add values within single quotes in query like this:

DELETE FROM [database].[table] WHERE item1='" + Int1+ "' and item2='"+Int2+"'"

Try it.

Posted 7-Sep-11 21:05pm

nagendrathecoder

Comments

Uday P.Singh 8-Sep-11 3:11am

yes, but what about sql-injection? that's why voted 4!

nagendrathecoder 8-Sep-11 3:15am

Thats right.

kami124 8-Sep-11 3:14am

no i voted 5 to u

nagendrathecoder 8-Sep-11 3:15am

Thanks Kami. But uday's point is also valid.
You must tackle SQL injections. :)

Sant Osha · Accepted Answer · 2011-09-07T21:02:00

Solution 1

Use following code:

("DELETE FROM [database].[table] WHERE item1='" + Int1+ "' and item2='"+Int2+"')

and i like to recommend you that delete records using "primary key"

Posted 7-Sep-11 21:02pm

Sant Osha