|
shyne7 wrote: i using vb.net
VB.NET is a language. The question was about frameworks. Which framework are you using? The ASP.NET framework or the WinForms framework (both of which are part of the larger .NET Framework)
shyne7 wrote: hos to use the like clause for searching
WHERE SomeColumn LIKE '%'+@SomeSearchTerm+'%'
@SomeSearchTerm is passes as a parameter for security
|
|
|
|
|
u want to filter
so ,
u are writing the query. ok then in where clause
fieldname like '" & textbox1.text & "%'
u will get the result
|
|
|
|
|
tnx...that helps...but i have two tables in one gridview...how could i view those in my gridview when i search for a data that is only in one of the tables
|
|
|
|
|
rohitsrivastava wrote: fieldname like '" & textbox1.text & "%'
NO NO NO NO!!!! Do NOT inject into SQL strings like this. I've been banging on about this for THREE years now! Doesn't anyone know about SQL Injection Attacks?!
SQL Injection Attacks and Tips on How to Prevent Them[^]
|
|
|
|
|
Ah well - at least I did mention parameterized queries (albeit in another post) . Don't worry Colin - some of the more professional members of the site have read/taken in your message. Perhaps your technical test should include a query that's wide open for Sql Injection and then ask candidates if they can tell you what's wrong with it.
Deja View - the feeling that you've seen this post before.
|
|
|
|
|
We believe we know the interval when multiple records are being entered when they shouldn't be (we don't know why yet, vendor to figure that out). The interval is something like 00:00:45 or so. Using managerial fuzzy logic, I can get better than superbly screwed up data by grouping the records by timestamp. This really seems like it lends itself to a cursor operation to first indicate whether the sorted records are in the proper date range, then we go by time and place a value into a new field to help us sort based on some fine subtraction caluculation. All in a job to automate it.
Anyone have a better suggestion? I'm pretty good with cursors and once it's run once, I can ignore existing rows to reduce the operation. It just seems so clumsy.
Thanks in advance,
i
|
|
|
|
|
Are the multiple records dups? This post needs more info what do mean by interval?
|
|
|
|
|
The "interval" is the time span during which dups were inserted in seconds. I though "interval" seemed appropriate. 
I've since found out that the multiple records are not dups. So there is no longer a need to do the record comparison and mark them in any way. We just need the vendor to answer a phone call so we can understand their model and eventually write a valid statement to aggregate all the related repair records by repair. (For example, an operator sees that a repair is needed, hits the button, automated machine repair happens, repair not effective, hits the button" should be 1 repair event, not 2).
_i
|
|
|
|
|
any one remind me how to update,delete on asp.net based on given txtfield?
e.g we write code like this in oracle:
--update code:
update EMP set f_name=:txt_name
where id=:txt_id;
commit;
---delete code:
delete from EMP
where id=:txt_id;
commit;
yesser
yasser
![Rose | [Rose]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/rose.gif)
|
|
|
|
|
Best way to do this is through parameterized queries. See this[^] article for advice.
Obviously, you will want to use the Oracle .Net providers.
Deja View - the feeling that you've seen this post before.
|
|
|
|
|
imports system.data.sqlclient
dim objsqlconn as sqlconnection
dim objsqlcmd as sqlcommand
dim dataset as dataset
dim strupdate as string
first update
objsqlconn=new sqlconnection("user id=sa;password=;initial catalog=databasename;data source=servername")
objsqlconn.open
strupdate="update EMP set f_name=:txt_name where id=:txt_id"
objsqlcmd=new sqlcommand(strupdate,objsqlconn)
objsqlcmd.executenonquery()
messagebox.show("Record successfully update")
second delete
objsqlconn=new sqlconnection("user id=sa;password=;initial catalog=databasename;data source=servername")
objsqlconn.open
strdelete="delete from EMP where id=:txt_id"
objsqlcmd=new sqlcommand(strdelete,objsqlconn)
objsqlcmd.executenonquery()
messagebox.show("Record successfully delete")
|
|
|
|
|
Thanks rohitsrivastava this is very Advance code ,but at the moment am using access database .I want only the Syntax or the command to delete,update.
I remmber in the past I was writing like this but am not soure about the Syntax
updatecode="update EMP set f_name Val&"(first_name.txt)"&''&"where id=Val&"(txtid.txt)"&"
-- modified at 8:07 Wednesday 12th September, 2007
yasser
|
|
|
|
|
How do you think this will work? First of all, you are connecting to SQL Server here, secondly the strupdate command is wrong. Finally, always use parameterized queries as they are much better.
Deja View - the feeling that you've seen this post before.
|
|
|
|
|
Hi All,
How do i get week of a month?
somthing like ....
Datename(week,getdate())
Can you please help?
Thanks
kibrom
|
|
|
|
|
select datediff(week,'2007.09.01',getdate())
it return value 2 which means it is second week from given date
I Love SQL
|
|
|
|
|
|
Months don't have weeks, years have weeks. At least that seems to be what ISO says.
|
|
|
|
|
SELECT CAST(DATEPART(wk,getdate())-DATEPART(wk,DATEADD(dd, -(DATEPART(dd, GETDATE()) - 1), GETDATE()))+1 as varchar)
|
|
|
|
|
Hi,i want to know that how can i get schedule back up from server to local ??
for example :
i have a database ("testDB")in the server ( www.server.com) then i need get backup every day and transfer all new data to my PC in (localhost ).
thanks.
|
|
|
|
|
objsqlconn=new sqlconnection("user id=sa;password=;data source=servername")
objsqlconn.open
objsqlcmd=new sqlcommand
objsqlcmd.connection=objsqlconn
objsqlcmd.commandtext="master..xp_cmdshell 'del d:\" + databasename + "'"
objsqlcmd.commandtype=commandtype.text
objsqlcmd.executenonquery
objsqlcmd.commandtext=" backup database " + databasename + " to disk='" + databasename + "'"
objsqlcmd.commandtype=commandtype.text
objsqlcmd.executenonquery
this is coding to backup of database from the server
|
|
|
|
|
I have a string of hex characters "0x89504e". I convert this to a string of binary characters @sOutput = "100010010101000001001110". I then run SELECT CAST(@sOutput AS BINARY). This returns me "0x313030303130303130313031303030303031303031313130000000000000".
How would I go about converting the string to binary such that the value would return as the original "0x89504e"? It's looking like the CAST is treating the string as numeric and converting a really large int to binary.
|
|
|
|
|
SELECT CONVERT(varbinary(20), 'stringValue')
I Love SQL
|
|
|
|
|
sonal dadhania1 wrote: It's looking like the CAST is treating the string as numeric and converting a really large int to binary
It is treating the string as a string and converting it in to its ASCII codes.
I don't use binary data types much, but the following works:
DECLARE @hex AS VARBINARY(10)
SET @hex = 0x89504e
SELECT @hex
NOTE: There are no quotes/apostrophes around the hex value.
If you are coming from an application, use varbinary parameters and pass the value to the paramter as a byte array (byte[])
|
|
|
|
|
Hi all,
I have a function called fnGetOrderItemPriceDummy, which takes two parameters, such as @OrderID & @chord. I was trying to execute this function in our linked server, and it fired error. My code follows.....
(Select * from Openquery([linkedserver],'select myserver.dbo.fnGetOrderItemPriceDummy ( '+ Convert(varchar(50) ,@OrderID)+' , '''''+ @chord+''''')).
Can anyone say where is my mistake....
Thanks for your time.....
Sebastian
|
|
|
|
|
I don't know syntax of OPENQUERY command, but I am sure that you are missing a database name here:
select myserver.DATABASE.dbo.fnGetOrderItemPriceDummy
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
