c# - Syntax error during inserting data using mysql -



c# - Syntax error during inserting data using mysql -

error:

incorrect syntax near 's'. unclosed quotation mark after charater string ');'.

the code:

private void btnadd_click(object sender, eventargs e) { sqlconnection cn = new sqlconnection(global::cimt.properties.settings.default.database2connectionstring); seek { string sql = "insert students(student_id,first_name,last_name,fathers_name,dob,mobile,address,post_code) values('"+this.txtid.text+"','"+this.txtfname.text+"','"+this.txtlname.text+"','"+this.txtfaname.text+"','"+this.txtdob.text+"','"+this.txtmob.text+"','"+this.txtaddress.text+"','"+this.txtpostcode.text+ "');"; sqlcommand exesql = new sqlcommand(sql, cn); cn.open(); exesql.executenonquery(); messagebox.show("add new record done !!" , "message" , messageboxbuttons.ok , messageboxicon.information); this.studentstableadapter.fill(this.database2dataset.students); } grab (exception ex) { messagebox.show(ex.message , "error", messageboxbuttons.ok, messageboxicon.error); } { cn.close(); } }

use parametrized queries guys told in comments, not avoids errors help avoid sql injection.

private void btnadd_click(object sender, eventargs e) { var cnstring = global::cimt.properties.settings.default.database2connectionstring; using (sqlconnection cn = new sqlconnection(cnstring)) { seek { cn.open(); using (var exesql = new sqlcommand( @"insert students(student_id ,first_name ,last_name ,fathers_name ,dob ,mobile ,address ,post_code) values(@student_id ,@first_name ,@last_name ,@fathers_name ,@dob ,@mobile ,@address ,@post_code);", cn)) { exesql.parameters.addwithvalue("@student_id", this.txtid.text); exesql.parameters.addwithvalue("@first_name", this.txtfname.text); exesql.parameters.addwithvalue("@last_name",this.txtlname.text ); exesql.parameters.addwithvalue("@fathers_name", this.txtfaname.text); exesql.parameters.addwithvalue("@dob", this.txtdob.text); exesql.parameters.addwithvalue("@mobile", this.txtmob.text); exesql.parameters.addwithvalue("@address", this.txtaddress.text); exesql.parameters.addwithvalue("@post_code", this.txtpostcode.text); exesql.executenonquery(); messagebox.show("add new record done !!" , "message" , messageboxbuttons.ok , messageboxicon.information); this.studentstableadapter.fill(this.database2dataset.students); } } grab (exception ex) { messagebox.show(ex.message , "error", messageboxbuttons.ok, messageboxicon.error); } } }

read on sqlparameter class

c# mysql winforms

Comments

Post a Comment

Popular posts from this blog

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* -

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* - i've inherited doc publishing process takes docbook , builds html , pdf output, using apache fop both. project had been started, never completed. lots of tweaking, i've able of doc sets build (20+), except handful, , fail severe code 1 of these 2 conditions: "fo:flow" missing kid elements. required content model: marker* "fo:block" not valid kid of "fo:root" the xml output comes out of docbook , docbook-fop checks out well-formed. the fop error in 1 book, "endecagloss", example, points end of string: <fo:flow flow-name="xsl-region-body" start-indent="4pc" end-indent="0pt"/> here’s log output in case: [java] severe: javax.xml.transform.transformerexception: file:/scratch/publishing/hudson/jobs/build-main-endeca-documentation/workspace/serverdoc/w...
Read more

mediawiki - How do I insert tables inside infoboxes on Wikia pages? -

mediawiki - How do I insert tables inside infoboxes on Wikia pages? - i want insert tables in infoboxes. example, have proteinbox i've developed using infobox template (http://health-and-medicine.wikia.com/wiki/template:proteinbox), , fasta field big fit comfortably in proteinbox. hence collapsible table within box. this tried: {{infobox | row 1 = {| class = "mw-collapsible mw-collapsed wikitable" |- | <!-- table content --> |} }} your problem is, putting nested table within template. pipe characters ( | ) in table syntax collides pipe usage in templates. the commonly used hack around create template called template:! , containing pipe character, , utilize when need set tables, parser functions or other stuff using pipe characters, within templates. table (with every | replaced {{!}} ): {{{!}} {{!}}- {{!}} a1 {{!}} b1 {{!}}- {{!}} a2 {{!}} b2 {{!}}} ...the equivalent of {| |- | a1 | b1 |- | a2 | b2 |} furthermore, hav...
Read more

Local Service User Logged into Windows -

Local Service User Logged into Windows - i created windows service tracks app server user connected through load balancer. it retrieves user logged windows on machine, cross references active directory (ad) business relationship homecoming first name, lastly name , e-mail (for notification through website created project) there 1 scheme on network users remote system, vista system, reason returning values "local service" logged machine, it's weird , security guys impossible "local service" business relationship logged windows. here how user logged windows managementscope ms = new managementscope("\\\\.\\root\\cimv2"); objectquery query = new objectquery("select * win32_computersystem"); managementobjectsearcher searcher = new managementobjectsearcher(ms, query); foreach (managementobject mo in searcher.get()) { _username = mo["username"].tostring(); } // remove domain part username string[] usernameparts = _...
Read more