Invalid column name ''.

Question

i have 3 database tables.
1. town(townname)
2.phase(phasename,townname)
3.sector(sectorname,townnam,phasename)
the datatype of all these fields is nvchar(50).

i have one webform sectorname.aspx
it consists:
townname.dropdown
phasename.dropdown
sectorname.textbox

townname.dropdown takes data frm town table in the database.
when i click on on townname.dropdown and select an item. it takes all those phase name in phase table that come under that selected town. but when i select townname it gives me the following error.

Invalid column name 'hayatabad'.

the code the given here.

protected void TownID_SelectedIndexChanged(object sender, EventArgs e)
{
DataTable dt = new DataTable();
DataSet ds = new DataSet();
SqlDataAdapter adap = new SqlDataAdapter();

cmd = new SqlCommand("select * from Phase where TownName=" + TownName.SelectedValue.ToString(), con);
//cmd.Connection = con;
con.Open();

adap.SelectCommand = cmd;
adap.Fill(ds);
dt = ds.Tables[0];
PhasName.DataSource = dt;
PhasName.DataTextField = "PhaseName";
PhasName.DataValueField = "PhaseName";
PhasName.DataBind();

}

please tell me whats the problem.???

Suthish Nair · Answer

I think already asked you to use Parametrized Queries to avoid such bugs/errors.

Sandeep Shekhawat · Answer

cmd = new SqlCommand(select * from Phase where TownName=' + TownName.SelectedItem.Text+' con); use this in your code.

saifullah khan · Answer

yes it loads the townname.dropdown. when i select one of the item from it so it must load those phases from phase table that comes under that selected item but it does not do so.

Sandeep Shekhawat · Answer

You r sure that Dropdownlist TownName Fill page load as like protected void Page_Load(object sender EventArgs e) { if (!Page.IsPostBack) { //fill town dropdown } }

saifullah khan · Answer

it is not giving the error but i does not fatch the data from table. when i click on the townname.dropdown it does not take take the data from phase table to show it in the phasename.dropdown.

Madhu K · Answer

As the value is string you have to use quotes. check the below synatax. cmd = new SqlCommand(  select * from Phase where TownName= ' + TownName.SelectedValue.ToString()+ '  con);