|
I have a textbox (txtPCID), button (btnSearch), and datagrid (DataGrid).
Right now, I want to enter "P0002" in the textbox and click on the search button, I will get all the records which belong to PCID= P0002.
Look at that 4th line.
I don't know why the value in the textbox cannot pass to the sqlCommand?
How to solve it?
Sub BindDataGrid()
Dim Tpcid As String
Tpcid = txtPCID.Text
cmdSql = New SqlCommand("Select * From Peripheral WHERE PCID=' & Tpcid & ' ", myConnection)
myConnection.Open()
DataGrid.DataSource = cmdSql.ExecuteReader()
DataGrid.DataBind()
myConnection.Close()
End Sub
|
|
|
|
|
cmdSql = New SqlCommand("Select * From Peripheral WHERE PCID='"+Tpcid+"' ", myConnection)
I am not sure.. just try once. Sorry if I am wrong.  - Sudeep
======
You need a head to program. Cool, fast and sharp.
|
|
|
|
|
You should really parameterise your command. What you have here, if it worked, is suseptable to an injection attack.
cmdSql = New SqlCommand("Select * From Peripheral WHERE PCID=@PCID", myConnection)
cmdSql.Parameters.Add("@PCID",SqlDbType.VarChar, 10).Value = Tpcid
The above is much safer. (Remember to change the SqlDbType and field length values as appropriate)
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell
Not getting the response you want from a question asked in an online forum: How to Ask Questions the Smart Way!
|
|
|
|
|
as title.
What is the sql statement?
thanks
|
|
|
|
|
http://www.w3schools.com/sql/sql_select.asp
======
You need a head to program. Cool, fast and sharp.
|
|
|
|
|
A good link
However, i would like to know how to insert char(') into database?
e.g
Insert into table1 values (''','hhhh')
it causes exception
THanks
|
|
|
|
|
this.SqlConnection = new System.Data.SqlClient.SqlConnection();
cmd = new SqlCommand("INSERT INTO TableName (intColumnA, chrColumnB) VALUES (1,'XYX')",this.SqlConnection);
cmd.ExecuteNonQuery();
What exception did you get?
======
Yo need a brain to code.
|
|
|
|
|
sorry
I would know to how to insert the character "'" (single quotation character) into the database varchar field.
Thanks!
|
|
|
|
|
Use 4 apostrophes, one for open string, two for the apostrophe and one for the close string.
If the apostrophe exists in the middle of a string do something like this: 'doesn''t'
Does this help?
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell
Not getting the response you want from a question asked in an online forum: How to Ask Questions the Smart Way!
|
|
|
|
|
There is way that you can store '
Find and Replace ' by • (Alt+7) and Insert the string in the database. On Retrival Find and Replace • by '
If you using ASP.Net or VB.Net or C# then Finding and Replacing is no Problem
Just Try
String.Replace("'","•");P
|
|
|
|
|
Just create a function that replaces all your ' (single apostrophe) with '' (TWO single apostrophe),
i.e. [Joe O'Connell] becomes [Joe O''Connell]
However, I do recommend using Data Adapters and SQLCommands to pass your parameters so you don't need to worry about this anymore.
It does make my life easier aside from being safer from SQL injection.
|
|
|
|
|
Data Adapters and SQLCommands
What's that?
How to do them?
Thanks!;P
|
|
|
|
|
Insert into table1 values ('''','hhhh')
i.e. replace ' by '' (quote by quote quote)
|
|
|
|
|
hi all,
I am getting following error..
An unhandled exception of type 'System.Data.SqlClient.SqlException' occurred in system.data.dll. There is no problem with my store procedure as I checked from Query Analyzer.
public static void EditTreatInstrument(int Id,string Name,string BarCode,string PDACode,DateTime ExpireTime,
int Method )
{
SqlCommand cmd = WesServer.GetSqlCommand.Get( Conn , CommandType.StoredProcedure ,
"pr_EditTreatInstrument" );
cmd.Parameters.Add( GetSqlParameter.Get( "@intId", SqlDbType.Int, Id ) );
cmd.Parameters.Add( GetSqlParameter.Get( "@nvchrName", SqlDbType.NVarChar, Name ) );
cmd.Parameters.Add( GetSqlParameter.Get( "@vchrBarCode", SqlDbType.VarChar, BarCode ) );
cmd.Parameters.Add( GetSqlParameter.Get( "@vchrPDACode", SqlDbType.VarChar, PDACode ) );
cmd.Parameters.Add( GetSqlParameter.Get(" @dtExpireDate", SqlDbType.DateTime, ExpireTime ));
cmd.Parameters.Add( GetSqlParameter.Get( "@intMethod", SqlDbType.Int, Method ) );
cmd.ExecuteNonQuery();
}
What are the condition when such error can occer ???
Thanks, Sudeep
======
You need a head to program. Cool, fast and sharp.
|
|
|
|
|
The SqlException object will contain more information.
The Message property and, if multiple error occurred, the Errors property will give lots of good information.
If you cannot see from the exception message then post back to the forum and I'm sure someone will know. Good luck!
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell
Not getting the response you want from a question asked in an online forum: How to Ask Questions the Smart Way!
|
|
|
|
|
After doing try catch within the error block I caught such exception:
System.Data.SqlClient.SqlException: @dtExpireDate is not a parameter for procedure pr_EditTreatInstrument. at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream) at System.Data.SqlClient.SqlCommand.ExecuteNonQuery() at.... so on
and when I excluded @dtExpireDate, then I see exception like
System.Data.SqlClient.SqlException: Procedure 'pr_EditTreatInstrument' excepts parameter '@dtExpireDate', which was not supplied. at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream) at... so on
Thank you, Sudee
======
You need a head to program. Cool, fast and sharp.
|
|
|
|
|
I have just noticed a problem in my db with the date format. The problem is that some servers are set to interpret dates differently, eg mm/dd/yy or dd/mm/yy. My problem is to find out which it needs and which to supply. I have also been told that the format of dates is an int, and just adds to 1/1/1900 to get the desired result. I am not sure how this works, but it sounds like it could fix my problem.
If you know of a way that I can parse a date to the db, and it will then decide how to format it, or whatever solution you have in mind, please let me know.
|
|
|
|
|
I just tend to use descriptive method of adding a date to my database.
e.g. "INSERT INTO [MyTable] ([type],[myDate]) VALUES (23, 'Sept 23 2004')"
I then let the DBMS handle everything else. This way there are no confusion over which is the day and which is the month.
|
|
|
|
|
The most reliable and cross-platform compatible way of handling dates that i have found it to use the format "YYYY-MM-DD", optionally "YYYY-MM-DD HH:MM:SS". It's unambiguous, and every DBMS i've used handles it fine.
If you're using MS SQL Server though, you can use any format you like, and remove ambiguity before your query using "set dateformat". see books online for that.
jon
using System.Beer;
|
|
|
|
|
I'm with Jon. Either use an ODBC Canonical date (YYYY-MM-DD HH:mm:SS.ffff) or use an ISO standard date (YYYYMMDD HH:mm:SS.ffff) Any DB server, regardless of regional settings, should correctly handle either of these formats.
Grim (aka Toby) MCDBA, MCSD, MCP+SB
SELECT * FROM user WHERE clue IS NOT NULL
GO
(0 row(s) affected)
|
|
|
|
|
|
I think the source file is not include with this article or plan to include in the future. If we follow step by step the some of the source file already include in its documents.
APO-CEDC
Save Children Norway-Cambodia Office
|
|
|
|
|
Thanks. But I dont think it's in the article though. I haven't gone thru it all yet. But read up to the section on ALGORITHM class implementation (stub code) and the include files mentioned are nowhere to be found.
DmhMemory.h and DmhMemory.cpp
DmhLocalization.h and DmhLocalization.cpp
ParamHandler.h, and ParamHandler.cpp
StaticAlgorithmMetadata.h
dmalgo.h and oledbdm.h
And they're not in article or Analysis Services installation directory.
Norman Fung
|
|
|
|
|
 my connection string
"server=localhost;initial catalog=MyDatabase;user id=;pwd=;trusted_connection=true"
but this string no longer works after installing SP2.
Just wondering if this is normal?
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
