Database

<br />
public void Execute1(string name){<br />
   ...<br />
   command.CommandText="Select CategoryID from Categories where CategoryName like @name";	<br />
   SqlParameter param=new SqlParameter     ("@name",System.Data.SqlDbType.NVarChar,15);<br />
   param.Value=name;<br />
   command.Parameters.Add(param);<br />
   ...}<br />

<br />
public void Execute2(string name){<br />
   ...<br />
   command.CommandText="exec sp_executesql N'Select CategoryID from Categories where CategoryName like @name', N'@name nvarchar(15)', @name = N'" + name +"'";<br />
   ...}<br />

Private Sub InitializeCommands()<br />
        ' Preparing Insert SQL Command<br />
        dataAdapter.InsertCommand = conn.CreateCommand()<br />
        dataAdapter.InsertCommand.CommandText = "INSERT INTO authors au_id, au_fname, au_lname, address VALUES @au_id, @au_fname, @au_lname, @address"<br />
<br />
AddParams (dataAdapter.InsertCommand, "au_id", "au_fname", "au_lname", "address")<br />
        dataAdapter.UpdateCommand = conn.CreateCommand()<br />
        dataAdapter.UpdateCommand.CommandText = _<br />
            "UPDATE authors au_id = @au_id, au_fname = @au_fname, au_lname = @au_lname,address = @address WHERE au_Id = @au_Id"<br />
AddParams(dataAdapter.updateCommand, "au_id", "au_fname", "au_lname", "address")<br />
<br />
dataAdapter.DeleteCommand = conn.CreateCommand()<br />
dataAdapter.DeleteCommand.CommandText = "DELETE FROM article WHERE au_id = @au_Id"<br />
        AddParams(dataAdapter.DeleteCommand, "au_Id")<br />
    End Sub<br />
<br />
Private Sub AddParams(ByVal cmd As SqlCommand, ByVal ParamArray cols() As String)<br />
        ' Adding Hectice parameters in SQL Commands<br />
        Dim col As String<br />
        For Each col In cols<br />
            cmd.Parameters.Add("@" + col, SqlDbType.Char, 0, col)<br />
        Next<br />
    End Sub<br />
<br />
Private Sub btnSave_Click(ByVal sender As System.Object, _<br />
                ByVal e As System.EventArgs) Handles btnSave.Click<br />
        lblLabel.Text = "Saving Changes..." <br />
        Me.Cursor = Cursors.WaitCursor<br />
        Dim row As DataRow = dataTable.Rows(currRec)<br />
        row.BeginEdit()<br />
        row("au_id") = txt1.Text <br />
        row("au_fname") = txt2.Text<br />
        row("au_lname") = txt3.Text<br />
        row("address") = txt4.Text<br />
        row.EndEdit()<br />
        dataAdapter.Update(ds, "authors")<br />
        ds.AcceptChanges()<br />
        ToggleControls(True)<br />
        insertSelected = False<br />
        Me.Cursor = Cursors.Default<br />
        lblLabel.Text = "Changes Saved"<br />
    End Sub<br />