string search of an array list

Question

Hi, I have created a new arraylist which stores strings. What I want is when someone enters a desired search string it brings up their entry (if it contains in the array list). The thing is I wouldn't know how to do this. I've tried a foreach loop to see whether the name exists in the arraylist from the the string entry but then i'm not to sure what to do from there. Even so, not even sure if using foreach is correct. I'm fairly new to c# so this is the first time i've met this so if anyone could help I would be very greatful. Thanks

Answer 1

hi Pankaj,
if you are creating dynamic query then at the time of creating sql string you can do following example :

 wherestring+=txt.Replace("'","''"); 

// single quote is passed string in
//first parameter and single quote is written twice '' for second.

Answer 2

Hi

when you are use the single quite you need add extra two quote to string.or else is make to sql injection.

About this please take look,

http://archives.devshed.com/forums/windows-107/sql-injecttion-401471.html

thank you

Answer 3

Thanks

Answer 4

Thanks

Answer 5

Hi you just need to Replace every Single timeWriten Quote to Double Time

suppose you are inserting

string " pankaj's Name "

then you should write String Like

"Pankaj' 's name "     { Dobule time Single Quotes before 's' )

Thats it :)

Better to Write Function That Will Replace Every Single Time Quote to Write it Double time in String

public string CSQ(string str)
{
 
    return Strings.Replace(str, "'", "''");
}


if i Helps you please check "Do you like this answer"

Answer 6

Please see the following two links:
http://it.toolbox.com/wiki/index.php/How_do_I_escape_single_quotes_in_SQL_queries%3F
http://blog.sqlauthority.com/2008/02/17/sql-server-how-to-escape-single-quotes-fix-error-105-unclosed-quotation-mark-after-the-character-string/