Database

Re: No SQL Server Management Tools

15-Feb-06 0:38

Although I cannot help on the set up problems (everything went flawlessly for me - sorry, that's not much consolation) I can answer this:

ma se wrote:
Can I connect to SQL Server 2000 with this management tool?

Yes. I've found it works very well. The only thing that didn't work was that it couldn't deal with any diagrams that were set up in the SQL Server 2000 database.

ColinMackay.net
"Man who stand on hill with mouth open will wait long time for roast duck to drop in." -- Confucius
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell

Brendan Vogt15-Feb-06 1:02

Brendan Vogt

15-Feb-06 1:02

Do you have SQL Server Express Edition installed as well? I have both, I wonder if it's not because of the Express edition "being in the way"?

I wonder if you can do queries from SQL Server 2005 through Visual Web Developer, SQL Server Express comes with VWD, and you can do queries through VWD.

What IDE do you code in?

Re: No SQL Server Management Tools

Colin Angus Mackay15-Feb-06 1:07

Urjent SQL Exception Problem

15-Feb-06 1:07

ma se wrote:
Do you have SQL Server Express Edition installed as well?

Yes, but I don't recall in which order they were installed.

ma se wrote:
I wonder if it's not because of the Express edition "being in the way"?

I wouldn't think so. The Express Edition is just the database engine and not much more.

ma se wrote:
What IDE do you code in?

Visual Studio 2005 Professional Edition. But I still use SQL Server 2000's Query Analyzer for scripting.

ColinMackay.net
"Man who stand on hill with mouth open will wait long time for roast duck to drop in." -- Confucius
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell

cbhkenshin14-Feb-06 21:20

14-Feb-06 21:20

Hi:

SQL Exception Message in C#:
Message:
The name 'SqlCommand' is not permitted in this context. Only constants, expressions, or variables allowed here. Column names are not permitted.

CODE:
//opening Conn
sqlConnection1.Open();
//creating SQL Command
SqlCommand insert_item = new SqlCommand("INSERT INTO inventory_item(stock_no, name, type, net_location, tag, brand_name, model_no, serial_no, machine_type_p_wh, oper_sys, ram, display, sound_card, nic, monitor, acess_type, computer_full_name, warranty, status, comments, emp_no, cate_no, supp_no) VALUES ('"+te_item_stock_no.Text+"','"+te_item_name.Text+"','"+te_item_type.Text+"','"+te_item_location.Text+"','"+te_item_tag.Text+"','"+te_item_brand_name.Text+"','"+te_item_model_no.Text+"','"+te_item_serial_no.Text+"','"+te_item_pentium.Text+"','"+te_item_os.Text+"','"+te_item_ram.Text+"','"+te_item_display.Text+"','"+te_item_sound_card.Text+"','"+te_item_nic.Text+"','"+te_item_monitor.Text+"','"+te_item_access_type.Text+"','"+te_item_computer_name.Text+"','"+te_item_warraty.Text+"','"+te_item_status.Text+"','"+te_item_comments.Text+"',"+"NULL"+","+cate_no_FK+","+supp_no+");", sqlConnection1);
//executing
int rows_affected = insert_item.ExecuteNonQuery();
//closing
sqlConnection1.Close();

Message:
The name 'SqlCommand' is not permitted in this context. Only constants, expressions, or variables allowed here. Column names are not permitted.

cbhkenshin14-Feb-06 21:59

14-Feb-06 21:59

Solved

cuz
in VALUES('test',...)

you only put the new value with specifying the column.

i used the sql from SQL server but ut only works there and not in C#.

Arigato Menna

George L. Jackson15-Feb-06 13:34

George L. Jackson

15-Feb-06 13:34

Your real problem is SQL injection! Use parameters! You cannot put everything between quotes (for example, dates).

Colin Angus Mackay15-Feb-06 21:54

15-Feb-06 21:54

To follow up on what George L. Jackson said: You might find this article, SQL Injection Attacks and tips on how to prevent them[^], to be useful.

ColinMackay.net
"Man who stand on hill with mouth open will wait long time for roast duck to drop in." -- Confucius
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell

cbhkenshin17-Feb-06 19:26

17-Feb-06 19:26

Thanks Colin and George for your kind concern.

and I'm already validataing input via TextBox_TextChanged.

Thanks;)

Colin Angus Mackay17-Feb-06 23:44

Join 3 Fields - Show all records From Table 1

17-Feb-06 23:44

cbhkenshin wrote:
I'm already validataing input via TextBox_TextChanged.

It doesn't matter, you should use parameters as a matter of course. Your validation may have an unexpected flaw it in that you are not aware of. If you have available a tool to improve the security of your application that isn't going to take any longer to implement that they way you were doing before (and using parameters instead of injecting values has other advantages as well) then it should be used.

I occasionally have to do security audits of code. If you inject a value into a SQL string where it was possible to use a parameter I'd fail the code. Its as simple as that. It wouldn't matter that I see you validating the input (which is a very commendable thing to do, and you should continue to do that). I don't know every possible attack vector, so I use parameters as an extra safe guard in case I've forgotten about something.

ColinMackay.net
Scottish Developers are looking for speakers for user group sessions over the next few months. Do you want to know more?

RichardBerry14-Feb-06 21:10

RichardBerry

14-Feb-06 21:10

Hi
Table1 has Warehouse, Product, Line_No, ....

Table2 has Warehouse, Product, Line_No, Circuit_Ref.

Table1 has a record for all Products

Table2 has records for some products

How do I write an MS-SQL query that will join on all 3 fields(Warehouse, Product and Line_no), and show ALL rows from Table1 and show Circuit_Ref from Table2 if it exists.

Thanks

Richard

CWIZO14-Feb-06 21:24

CWIZO

14-Feb-06 21:24

Please post a more detailed description of you database structure and provide some sample data.

Q:What does the derived class in C# tell to it's parent?
A:All your base are belong to us!

RichardBerry14-Feb-06 23:32

RichardBerry

14-Feb-06 23:32

Hi
1) Table bmassdm is a full list of products
bmassdm fields: warehouse, product_code, circuit_number

2) Table bmasscm contains circuit references for some of the items in bmassdm
bmasscm fields: warehouse, product_code, circuit_number, circuit_reference

I need to select all the rows from bmassdm, and need to get the circuit_reference from bmasscm if there is one

The statement below gets ONLY the rows from bmassdm that ALSO have a circuit_reference

strSelect = "SELECT bmassdm.warehouse + " _
& "bmassdm.product_code, " _
& "bmasscm.circuit_reference " _
& "FROM (bmassdm INNER JOIN bmasscm " _
& "ON (bmassdm.product_code = bmasscm.product_code) " _
& "AND (bmassdm.assembly_warehouse = bmasscm.assembly_warehouse) " _
& "AND (bmassdm.circuit_number = bmasscm.circuit_number) " _

cbhkenshin14-Feb-06 21:42

14-Feb-06 21:42

RichardBerry wrote:
Table1 has Warehouse, Product, Line_No, ....

Table2 has Warehouse, Product, Line_No, Circuit_Ref.

Hi Richard:

First of all what i've understod from your message that you have table1 and table2 which both have their Warehouse, Product, Line_No in common and thats Wrong you should normlize your database.

I'll give you a query that will give you an answer to joining.

SELECT inventory_item.stock_no, inventory_item.type, accessories.name, hard_disks.model_no
FROM inventory_item INNER JOIN accessories ON inventory_item.accs_no = accessories.accs_no INNER JOIN hard_disks ON inventory_item.item_no = hard_disks.inv_no

Colin Angus Mackay14-Feb-06 22:34

14-Feb-06 22:34

cbhkenshin wrote:
you have table1 and table2 which both have their Warehouse, Product, Line_No in common and thats Wrong

I would suggest that there is insufficient information to determine whether the model is a good or bad one. Normalisation is not always the lofty goal that a lot of people think it should be. For example, in a reporting senario normalisation is a hinderance rather than a help. However, that said, most data models would benefit from better normalisation.

ColinMackay.net
"Man who stand on hill with mouth open will wait long time for roast duck to drop in." -- Confucius
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell

Re: if condition error in Sp

RichardBerry15-Feb-06 0:39

RichardBerry

15-Feb-06 0:39

Hi
Ok, I cannot touch the Database - Belongs to our ERP system.

I think I should be using LEFT JOIN?

I also oversimplified things a bit, because there is an third table, from which I need one field (Description) which also joins on warehouse and product.

I pulled the tables into access, and tried the query there.

bmassdm has 16042 rows
bmasscm has 15901 rows
stockm has 5891 rows (all items in bmassdm DEFINITELY exist in stockm)
Query returns 15553 rows (I need it to return the full 16042 rows form bmassdm)

Here is the full query:

SELECT bmassdm.assembly_warehouse+bmassdm.product_code AS Assembly, bmassdm.component_whouse+bmassdm.component_code AS Component, bmassdm.description AS Description, bmassdm.usage_quantity AS Qty, bmasscm.circuit_reference AS CctRef, stockm.long_description
FROM (bmassdm LEFT JOIN bmasscm ON (bmassdm.circuit_number =val( bmasscm.circuit_number)) AND (bmassdm.product_code = bmasscm.product_code) AND (bmassdm.assembly_warehouse = bmasscm.assembly_warehouse)) INNER JOIN stockm ON (bmassdm.product_code = stockm.product) AND (bmassdm.assembly_warehouse = stockm.warehouse)
WHERE (((bmasscm.line_number)='000'));

Running DTS against 2005

Tad McClellan14-Feb-06 16:50

Tad McClellan

14-Feb-06 16:50

We have a SQL 2000 server the pulls data from a 2005 server, processes it, and pushes it back in DTS. The problem is that I think this causes timeouts on the 2005 server. Can anyone confirm that might be a problem?

E=mc² -> BOOM

Third Party Control

welbert14-Feb-06 15:18

welbert

14-Feb-06 15:18

Hi everyone,

Need your help very badly.. where can i download a free full version of Flex cell 2.0 .net framework a third party control.... links are highly appreciated....

tnx tnx tnx tnx and more power.... :-> Rose | [Rose]

Re: Third Party Control

Dave Kreskowiak15-Feb-06 4:31

Dave Kreskowiak

15-Feb-06 4:31

See my reply here[^].

RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome

if condition error in Sp

Vipin.d14-Feb-06 7:39

Vipin.d

14-Feb-06 7:39

my sp is

create procedure insertApplcn

@txtjcode as nvarchar(20),
@txtcname as nvarchar(30),
@dtdob as smalldatetime,

@txtpaddr1 as nvarchar(30),
@txtpaddr2 as nvarchar(30),
@txtpaddr3 as nvarchar(30),
@txtppin as nvarchar(6),

@txtcourse1 as nvarchar(50),
@txtcourinst1 as nvarchar(45),
@txtcouruniv1 as nvarchar(50),
@txtcourstart1 as nvarchar(4),
@txtcourend1 as nvarchar(4),
@intmark1 as decimal(5),

@txtcourse2 as nvarchar(50),
@txtcourinst2 as nvarchar(45),
@txtcouruniv2 as nvarchar(50),
@txtcourstart2 as nvarchar(4),
@txtcourend2 as nvarchar(4),
@intmark2 as decimal(5),

@txtcourse3 as nvarchar(50),
@txtcourinst3 as nvarchar(45),
@txtcouruniv3 as nvarchar(50),
@txtcourstart3 as nvarchar(4),
@txtcourend3 as nvarchar(4),
@intmark3 as decimal(5)

as insert into applcn(txtcname,txtjcode,dtdob,txtpaddr1,txtpaddr2,

txtpaddr3,txtppin,txttaddr1,txttaddr2,txttaddr3,txttpin,

--Qualification

txtcourse1,txtcourinst1,txtcouruniv1,txtcourstart1,txtcourend1,intmark1,

If (@txtcourse2 <>'--Select One--') Then

txtcourse2,txtcourinst2,txtcouruniv2,txtcourstart2,txtcourend2,intmark2,

End If

If @txtcourse3 <> "--Select One--" Then

txtcourse3,txtcourinst3,txtcouruniv3,txtcourstart3,txtcourend3,intmark3,

End If

)

it show error incorrect syntax near 'if' condition?????

plz help.is it posiible???

All I ever wanted is what others have....

CrazySanker

-- modified at 13:39 Tuesday 14th February, 2006

Colin Angus Mackay14-Feb-06 10:49