simple issue ? Windows forms ..

Question

Hi

When i am trying like this :

cmd.CommandText = "select LastName,FirstName,EmailAddress,MobilePhone from contactdetails where LastName = 'gutta' "; my code executing perfect when i am giving static data like gutta ...

BUT

I am getting no error .. .. ..

when i am trying like this ..

cmd.CommandText = "select LastName,FirstName,EmailAddress,MobilePhone from contactdetails where LastName = " + textBox1.Text ;

ERROR IS :

dr = cmd.ExecuteReader(); ------------------>

Invalid column name 'gutta'.

Regards

Vulpes · Answer

Assuming that textBox1 contains just gutta (without the enclosing single quotes) you'll need to add the single quotes yourself: cmd.CommandText = select LastNameFirstNameEmailAddressMobilePhone from contactdetails where LastName = ' + textBox1.Text +'; Alternatively (and better) use a parameter: cmd.CommandText = select LastNameFirstNameEmailAddressMobilePhone from contactdetails where LastName = @Name; cmd.Parameters.AddWithValue(@Name textBox1.Text);

Vulpes · Answer

I'd imagine in the latter case that countryid is of INT type in the database and so doesn't need any surrounding single quotes. Only strings and dates need quotes. Numbers don't.

SUNIL GUTTA · Answer

Ooops yes you are right .. :) Ty for helping .. sometimes my brain freezes darn

SUNIL GUTTA · Answer

Hi mate Ty so much your help Helps :) I feel confused sometimes .. The same thing i used somewhere in cascading dropdownlists its working fine but here in the above senario its popping me error .. MY LAST senario which didnt give me any sort of error is cmd.CommandText = select statestateid from countrystate where countryid= + DropDownList1.SelectedValue; Any ideas y :)