C#

public static DataTable GetAll()
{
    const string Query = """
        SELECT
            ...
        FROM
            ...
        """;

    try
    {
        using (var connection = Connection.CreateAndOpenConnection()) // Make this method open the connection before returning it...
        using (var command = new SqlCommand(connection, Query))
        using (var reader = command.ExecuteReader())
        {
            DataTable dt = new DataTable();
            dt.Load(reader);
            return dt;
        }
    }
    catch (SqlException ex)
    {
        throw new YourCustomException("There was an error retrieving the list of all things. See the inner exception for details.", ex);
    }
}

Quote:

Maximum Number Of Host Parameters In A Single SQL Statement

A host parameter is a place-holder in an SQL statement that is filled in using one of the sqlite3_bind_XXXX() interfaces. Many SQL programmers are familiar with using a question mark ("?") as a host parameter. SQLite also supports named host parameters prefaced by ":", "$", or "@" and numbered host parameters of the form "?123".

Each host parameter in an SQLite statement is assigned a number. The numbers normally begin with 1 and increase by one with each new parameter. However, when the "?123" form is used, the host parameter number is the number that follows the question mark.

SQLite allocates space to hold all host parameters between 1 and the largest host parameter number used. Hence, an SQL statement that contains a host parameter like ?1000000000 would require gigabytes of storage. This could easily overwhelm the resources of the host machine. To prevent excessive memory allocations, the maximum value of a host parameter number is SQLITE_MAX_VARIABLE_NUMBER, which defaults to 999 for SQLite versions prior to 3.32.0 (2020-05-22) or 32766 for SQLite versions after 3.32.0.

The maximum host parameter number can be lowered at run-time using the sqlite3_limit(db,SQLITE_LIMIT_VARIABLE_NUMBER,size) interface.

OriginalGriff wrote:

* Unless you use the CommandText property instead of a SqlLiteCommand - then you are wide open to SQL Injection.

coco243 wrote:

Blazor seems intresting because it is used for frontend

coco243 wrote:

I want to learn tools that help me not those that pushes me away from my goal.