ASP.NET

ASP.NET RSS

Asp.net Sql Query

Please support our ASP.NET advertiser: Intel Parallel Studio Home

•

Join Date: Sep 2007

Posts: 1

Reputation: m_saahil is an unknown quantity at this point

Solved Threads: 0

m_saahil

Offline

Newbie Poster

Asp.net Sql Query

Sep 25th, 2007

Hi all
I need urgent help to complete my project
I am unable to update my sql database.I have to update the database using textbox value as primary key and the other tools are textbox,dropdownlist and calender which i have used
I am doin project on ASP.NET using vb.net so plzz give me the coding in vb.net

the code i have written is as shown below
please help me out soon

 Help with Code Tags 
 ASP.NET Syntax (Toggle Plain Text) 
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
myConnection = New SqlConnection("server =sqlserver.htsdomain.net;uid=sa;pwd=;database=CentralHTS")
        'myConnection.Open()
        'myCommand = New SqlCommand(UPDATE task  SET Numbercardused=@TextBox1.text,Numberfreetv=@Dropdownlist1,Datefrom,Dateto  where (PhoneNumber=@TextBox1.Text))
        'Response.Write("Record Updated")
 
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
myConnection = New SqlConnection("server =sqlserver.htsdomain.net;uid=sa;pwd=;database=CentralHTS")
        'myConnection.Open()
        'myCommand = New SqlCommand(UPDATE task  SET Numbercardused=@TextBox1.text,Numberfreetv=@Dropdownlist1,Datefrom,Dateto  where (PhoneNumber=@TextBox1.Text))
        'Response.Write("Record Updated")

•

Join Date: Feb 2005

Posts: 1,181

Reputation: hollystyles will become famous soon enough

Solved Threads: 67

hollystyles hollystyles is offline

Offline

Veteran Poster

Re: Asp.net Sql Query

Sep 25th, 2007

You need to put strings in double quotes. The sql string argument to the SqlCommand constructor needs to be quoted.

myCommand = New SqlCommand("UPDATE task SET ...

don't put @ in front of the webserver control instances (you are confusing them with TSQL parameters)

Help with Code Tags

(Toggle Plain Text)

myCommand = New SqlCommand("UPDATE task  SET Numbercardused=" & TextBox1.text & " ...

The dropDownList you need to use the Selectedvalue property

Help with Code Tags

(Toggle Plain Text)

... Numberfreetv=" & Dropdownlist1.SelectedValue & " ...

You need to execute the command now it's built:

 Help with Code Tags 
 ASP.NET Syntax (Toggle Plain Text) 
 myCommand.ExecuteNonQuery()
 myCommand.ExecuteNonQuery()

Last edited by hollystyles; Sep 25th, 2007 at 9:12 am.

==========================================
Yadda yadda yadda...
Web junky, fevered monkey

•

Join Date: Sep 2007

Posts: 5

Reputation: adamm84 is an unknown quantity at this point

Solved Threads: 1

adamm84

Offline

Newbie Poster

Re: Asp.net Sql Query

Sep 25th, 2007

putting sql inline like that is extremely dangerous and not safe at all, i would suggest moving your sql to stored procedures, or at least parameterizing your query, you should also do some back end data verification, e.g. check for nulls, emptry strings, etc.