Re: Paramerterized OleDB Query - C# Discussion Boards

25-Jul-13 0:21

To suppress the warning CA2100 i am trying to create a parameterized query. By the following code.

string sheet_name=listBox_Select_a_sheet.SelectedItem.ToString();

OleDbCommand cmd = MyConnection.CreateCommand();

cmd.CommandText = "SELECT count(*) FROM [?]";

cmd.Parameters.AddWithValue("?", sheet_name);

cmd.ExecuteNonQuery();

The value of the ? is not replaced.

I have also tried the following

 OleDbCommand cmd = MyConnection.CreateCommand();

OleDbParameter para = new OleDbParameter("?", sheet_name);

cmd.Parameters.Add(para);

cmd.CommandText = "SELECT count(*) FROM [?]";

and

string strSql = "SELECT count(*) FROM [@Name]";
cmd.Parameters.AddWithValue("@Name", sheet_name);

My aim is to replace the ? with the parameter.

And one more doubt is can we use parameterized query to replace a table name?

Dave Kreskowiak25-Jul-13 1:17

Dave Kreskowiak

25-Jul-13 1:17

Parameters do not work for table identifiers. They only work for columns or other identifiers that use data types, such as stored procedure parameters.

A guide to posting questions on CodeProject[^]

Dave Kreskowiak

gautamn199025-Jul-13 19:28

25-Jul-13 19:28

Thank you for your kind reply. That was very helpful. One more thing need to be cleared. How can we suppress the warning CA2100 : Microsoft.Security for the following code?

string sheet_name=listBox_Select_a_sheet.SelectedItem.ToString();
string strSql = "SELECT count(*) FROM sheet_name";
using (OleDbCommand cmd = new OleDbCommand(strSql, MyConnection))//CA2100 Warning:Microsoft.Security
{
   cmd.ExecuteNonQuery();
}

Dave Kreskowiak26-Jul-13 2:52

Dave Kreskowiak

26-Jul-13 2:52

Turn off Code Analysis when you compile. It's not a compiler warning but a code analysis warning. This is to remind you that you should not use user input directly when building your SQL statement as a string.

A guide to posting questions on CodeProject[^]

Dave Kreskowiak

gautamn199028-Jul-13 19:03

28-Jul-13 19:03

Thank you so much for your kind support. I have learned new things on parameterized OleDB Query. I hope to help help other in future.

PIEBALDconsult25-Jul-13 14:19

PIEBALDconsult

25-Jul-13 14:19

gautamn1990 wrote:
To suppress the warning CA2100

Never heard of it, never seen it. I do something like:

string strSql = System.String.Format ( "SELECT count(*) FROM [{0}]" ,sheet_name) ;

for table names there's really no substitute. Unsure | :~

gautamn199025-Jul-13 19:45

25-Jul-13 19:45

Thank you for your reply. I tried your concept. the name is getting replaced but during code analysis CA2100: Microsoft.Security: warning is still appearing. Sting sheet_name is value in obtained from users input by the following code.

string sheet_name=listBox_Select_a_sheet.SelectedItem.ToString();
string strSql = "SELECT count(*) FROM sheet_name";
using (OleDbCommand cmd = new OleDbCommand(strSql, MyConnection))//CA2100 Warning:Microsoft.Security
{
   cmd.ExecuteNonQuery();
}

How to supress the CA2100 Warning:MicroSoft.Security ?

DataGridview ComboBox Filter

PIEBALDconsult26-Jul-13 7:58

PIEBALDconsult

26-Jul-13 7:58

gautamn1990 wrote:
during code analysis

Is that an option you turn on? Like FxCop or similar? I've never seen that warning.

Awais Jan24-Jul-13 23:44

Awais Jan

24-Jul-13 23:44

i have problem in dataGridView1
Problem is When i select a record in dataGridView1 Combo Box "Medicine Category" then it show Name of Category in dataGridView1 Combo Box "Medicine Name" First,
When i Select 2nd Row Record"Medicine Category" then it fill Medicine Name problem
e.g:
Ist row Select Syrup then show Medicine Name(Cough)
2nd row Select Tablets then show Medicine Name (Panadole)
but it change Records Ist Rows
the code is :

string query = "select * from item_detail where m_type = '" + GridView_Purchase.Rows[e.RowIndex].Cells[0].Value.ToString() + "'"; //Take value at column 1st

                cbName.DataSource = dbSelect.selectRecords(query).Tables[0];//Fill Recors in Combo BOX "Cb name"

                cbName.DisplayMember = "m_name";

problem with datagridview in windows application

Arun kumar Gautam24-Jul-13 20:59

Arun kumar Gautam

24-Jul-13 20:59

I hav a datagridviewview in windows application whose column names are set from the fron end i setted their propertyname also cause i wanna to bind it with database, just like as
Name Address
Admin Delhi

so m wanna tht as i will click on address cell of any row there is one combobox will show who is binded with database
and as i will click on another row, the previous row will be show normally as a textboxcolumn and currentcell with show as a combobox column who will also binded with database

Re: problem with datagridview in windows application

Eddy Vluggen25-Jul-13 7:12

Re: problem with datagridview in windows application

25-Jul-13 7:12

I've read your post a couple of times, but I can't find a question or find at which point you got stuck. Can you explain what behaviour you were expecting, and the actual results? With a part of the code to demonstrate the problem?

Bastard Programmer from Hell Suspicious | :suss:

If you can't read my code, try converting it here[^]

Arun kumar Gautam25-Jul-13 19:32

Arun kumar Gautam

25-Jul-13 19:32

Hello Sir,

Look i have a datagridview who is binded with database and shows those values

Name Address
admin Delhi
adam India

as i'm going to click on delhi my datagridview will show a combobox on click of it and shows a list of cities from database

and after selecting any value from combobox i'm moving toward next row so as i'm going to next row m wanna tht combox will convert into textboxcolumn again thts the problem happening with me.

Hope so tht now u can understand my problem...

Re: problem with datagridview in windows application

Eddy Vluggen26-Jul-13 8:05

single sogn on using active directory

26-Jul-13 8:05

Arun kumar Gautam wrote:
Hope so tht now u can understand my problem...

Sounds more like a specification than a problem.

You can add a DataGridViewComboBoxColumn[^] to the DataGridViews "Columns" collection. Also note;

From MSDN[^]
With the DataGridViewComboBoxColumn, you can display a column of cells that contain drop-down list boxes. This is useful for data entry in fields that can only contain particular values, such as the Category column of the Products table in the Northwind sample database. [...] Combo box columns are not generated automatically when data-binding a DataGridView control. To use combo box columns, you must create them manually and add them to the collection returned by the Columns property.

Samples are here[^], walktroughs and howto's over here[^].

Hope that helps to get you started Smile | :)

Bastard Programmer from Hell Suspicious | :suss:

If you can't read my code, try converting it here[^]

ketan italiya24-Jul-13 20:42

ketan italiya

24-Jul-13 20:42

hie,code team members

currently i make a project on school management team,i use .net framework 4.0 and linq for coding.
i want to put single sign on using active directory concept in web-application.

so my question is that how i implement in it my project.
give me tips for that

Thanks in advance....

Regards !
ketan

Eddy Vluggen25-Jul-13 7:08

25-Jul-13 7:08

ketan italiya wrote:
give me tips for that

I've got something better than a tip; documentation[^] Smile | :)

Bastard Programmer from Hell Suspicious | :suss:

If you can't read my code, try converting it here[^]

ketan italiya25-Jul-13 22:48

ketan italiya

25-Jul-13 22:48

thanks Eddy....it will helpful for me... Laugh | :laugh:

Eddy Vluggen26-Jul-13 23:11

26-Jul-13 23:11

You're welcome Smile | :)

Opening a file from the installation directory

mrcbitting30-Jul-13 3:58

mrcbitting

30-Jul-13 3:58

I recently recorded some simple settings that might help (integrating AD w/ .net):

http://chrisbitting.com/2013/07/29/c-get-email-address-from-active-directory-using-username-in-asp-net/[^]

Matthew Menard24-Jul-13 10:18

Matthew Menard

24-Jul-13 10:18

I'm developing a C# windows program that, among other things opens up a configuration file and reads in the data and responds appropriately. I currently have the path to this configuration file hardcoded. It's located in the installation directory "C:\Program Files\... but I was wondering if there's a shortcut of some kind to get the location of the program that's running, and use that to grab the configuration file, so I don't have to hardcode it. Thanks.

NickPace24-Jul-13 10:41

NickPace

24-Jul-13 10:41

Application.StartupPath (in the System.Windows.Forms namespace)

-NP

Never underestimate the creativity of the end-user.

Matthew Menard25-Jul-13 2:06

Matthew Menard

25-Jul-13 2:06

Thanks. I appreciate you taking the time to respond.

Ron Beyer24-Jul-13 10:42

Ron Beyer

24-Jul-13 10:42

Application.StartupPath if you have a WinForms application. Otherwise you can use the methods located in the System.Reflection.Assembly class to get the location of the executing assembly.