Fetching session values in next page and populating into gridview

Question

0.00/5 (No votes)

See more:

Hi, i m pretty new to asp.net and working with a project..

In my scenario in the first page i have a dropdown, 2 textboxes n a button

C#

protected void Button2_Click(object sender, EventArgs e)
   {
       Session["date"] = Request["TextBox1"];
       Session["duedate"] = Request["TextBox2"];
       Session["status"] = Request["DropDownList1"];
       Response.Redirect("Default6.aspx");

   }

the above code is in the first page. Then in the second page i have a gridview which m populating as follows:-

C#

string conn = System.Configuration.ConfigurationManager.ConnectionStrings["CrystalConnectionString"].ConnectionString;
            SqlConnection connection = new SqlConnection(conn);
            string que = "select * from Table4 where ( (status='" + Session["status"] + "' and date='" + Session["date"] + "' and duedate='" + Session["duedate"] + "') or ((status='" + Session["status"] + "')   )  ";
            SqlDataAdapter sd = new SqlDataAdapter(que, connection);
            DataSet dsa = new DataSet();
            sd.Fill(dsa, "Table4");
            GridView1.DataSource = dsa;
            GridView1.DataBind();

here only one part of the query runs fine not the other. please help me with this.

Thanks in advance...

Posted 4-Jan-12 0:58am

Pankaja Kanavi

Updated 4-Jan-12 1:00am

Uday P.Singh

v2

Add a Solution

Comments

visnumca123 4-Jan-12 7:00am

what type of error you are getting here

koolprasad2003 4-Jan-12 7:01am

what is error ?

Nicholas Butler 4-Jan-12 7:05am

Beware SQL Injection Attacks

AmitGajjar 4-Jan-12 7:30am

use Stored procedure if possible.

5 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

SujayC · Accepted Answer · 2012-01-04T01:16:00

Probably you are missing one bracket at the end of the query. try replacing with the below text

C#

string que = "select * from Table4 where ( (status='" + Session["status"] + "' and date='" + Session["date"] + "' and duedate='" + Session["duedate"] + "') or ((status='" + Session["status"] + "')   )  )";

Hope this helps !!!

Wendelius · Accepted Answer · 2012-01-04T12:06:00

The query should generate an exception since you're missing (or having an extra) parenthesis.

Also never concatenate literal values to your query. For example, try what happens if you input "some'text" to TextBox1. Use SqlParameter[^] with your queries. So the query could look like:

C#

...
string que = @"
select * 
from Table4 
where (status=@status and [date]=@date and duedate=@duedate) or (status=@status)";
command.Parameters.AddWithValue("@status", Session["status"]);
command.Parameters.AddWithValue("@date ", Session["date"]);
command.Parameters.AddWithValue("@duedate", Session["duedate"]);
...

Since you have currently used just a SQL string, you would need a SqlCommand[^] to properly assign parameters. Also note that if you use reserved words, enclose them with []

Also it looks like all your columns in the table are strings but you use date data. Always try to use proper data types (for example date or datetime2 for date columns). This eliminates unnecessary type conversions etc.

sriman.ch · Accepted Answer · 2012-01-04T16:54:00

Hi,

Try the following

C#

string que = "select * from Table4 where status='"
                + Session["status"] + "' and date='" + Session["date"] + "' and duedate='" + Session["duedate"] + "' or status='" + Session["status"] + "'";

But try to use stored procedure instead of inline queries....

purnananda behera · Accepted Answer · 2012-01-05T20:40:00

SqlConnection connection = new SqlConnection("MyConnectionString");
            string que = "select * from Table4 where (status=@status and [date]=@date and duedate=@duedate) or (status=@status)";
            SqlCommand cmd = new SqlCommand(que, connection);
            cmd.Parameters.AddWithValue("@status", Session["status"]);
            cmd.Parameters.AddWithValue("@date ", Session["date"]);
            cmd.Parameters.AddWithValue("@duedate", Session["duedate"]);
            SqlDataAdapter da = new SqlDataAdapter(cmd);
            DataSet ds = new DataSet();
            da.Fill(ds, "Table4");
            GridView1.DataSource = ds;
            GridView1.DataBind();

devbtl · Accepted Answer · 2012-01-05T20:46:00

if in case your session values are not so private or you are about to passing values from 1 page to another. Then you can try a global static class where you declare your static string variables and on btnClick you can pass your values to these Global member variables and use these variables's values in other page.

Fetching session values in next page and populating into gridview

5 solutions

Solution 1

Solution 2

Solution 3

Solution 4

Solution 5

Add your solution here

Preview 0