C#

SqlConnection cn = new SqlConnection("server=.;uid=sa;pwd=sa;database=Payroll1");
string ssql = "Select * from EmpDetails";
SqlDataAdapter da = new SqlDataAdapter(ssql, cn);
DataSet ds = new DataSet();

try 
{ 
cn.open();
da.Fill(ds);
BindingSource bindgrd = new BindingSource(); 
bindgrd.DataSource = ds;

if(ds.Tables[0].Rows.count > 0)
{
this.Datagridview1.DataSource = bindgrd; 
}
else
{
lblError.text = "No Rows Returned";
}
catch(SQlException ex)
{
lblError.text = ex.Message;
}
Finaly
{
cn.close();
}

SqlCommand cmd = new SqlCommand();
cmd.Connection = sqlConnection();
cmd.CommandText ="your query";
SqlDataAdapter adapter = new SqlDataAdapter(cmd);
DataSet ds = new DataSet();
adapter.Fill(ds);
datagridview1.DataSource = ds;

shekhar258395 wrote:

hw can i compress webcam image into less then 1 kb

                    ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(
delegate
 {
   return true;
 });

cmd.CommandText = "insert into timemgmt(empid,sysdte,intime,outtime) values ('" + textBox1.Text + "','" + label19.Text + "','" + label18.Text + "','" + label18.Text + "')";

mjawadkhatri wrote:

cmd.CommandText = "Select empid ,sysdte from timemgmt where empid = '" + textBox1.Text + "' and sysdte ='" + label19.Text + "'";

if(odr.read())
{
 MessageBox.Show("You Already IN this ID Today");
}
else
{
 cmd.CommandText = "insert into timemgmt empid, sysdte, intime, outtime) values('" + textBox1.Text + "','" + label19.Text + "','" + label18.Text + "','" + label18.Text + "')";
cmd.ExecuteNonQuery();
}

1. Give your variables meaningful names. At a glance, what does textBox1 do?
2. Your code is wide open to a SQL Injection attack. You need to look into using parameterised queries here.
3. Your insert statement does nothing. You create the command text and then close the connection - you need to execute the command using cmd.ExecuteNonQuery();
4. You have no exception handling. What happens if you can't connect the database, for instance?