Database

SqlCommand cmd = con.CreateCommand();
            cmd.CommandText = "SELECT f1 from t2 WHERE upper(f1) LIKE @criteria";
            cmd.Parameters.Add("@criteria", SqlDbType.VarChar).Value = "%'MAIRAJ%";

howardjr wrote:

how do you quote strings that already have quotes in them, either a single or a single and a double quote?

howardjr wrote:

In my case I'm lucky in that I'm the one writing the select statement and dealing with the parameter values, so since I'm not going to Attack my own system , I don't have to worry about this.

Colin Angus Mackay wrote:

You might need protection from yourself.

PaulC1972 wrote:

Don't you also mean from employees within an organization?

kindman_nb wrote:

please ... any one come to aid me , i searched alot without any result

ghumman63 wrote:

there is a field named ID which belongs to both tables

create trigger dbo.DeleteTrigger on dbo.table1<br />
FOR DELETE<br />
AS<br />
   DELETE table2 <br />
   WHERE table2.ID = ( SELECT ID FROM DELETED)<br />
go