Visual Basic

Public Module TestDll
    Public Sub Test()
        MsgBox("Hi")
    End Sub
End Module

Delegate Sub Tst() 
.
.
.
 Static dll_loaded As Boolean, dll_handle As Int32,  fn As tst
 dll_handle = LoadLibrary("Testdll.dll")
 msgfn = GetProcAddress(dll_handle, "Test")
 msgfn.Invoke()

Declare

FileInfo info=new FileInfo(fileName);
attributes=info.Attributes;
bool isFolder=(attributes & FileAttributes.Directory)!=0;
...

<code>
  Dim info as New FileInfo(fileName)
  Dim isFolder As Boolean = info.Attributes And FileAttributes.Directory
</code>

If IO.File.Exists(Path) Then
   'It is a file
ElseIf IO.Directory.Exists(Path) Then
   'It is a folder
End If

Naglaa Saeed wrote:

I mean that I will send user link of the application form

Naglaa Saeed wrote:

I will send user link of the application form with the ID

paas wrote:

if his UserID was being passed as a string, you can not concatenate queries in Access

paas wrote:

And, since UserID is actually being passed as an integer, I do not see how a nefarious user would be able to sneak an 'Or' conditional into the where command that will automatically make the result True.

paas wrote:

but that can also be handled easily with a Replace statement, and without the use of parameterized queries.

Create PROC prc_Update
(
@Password varchar(40),
@UserID int
)
AS
Update tblLogin 
set Password=@Password
where UserID =@UserID

String strcon = ConfigurationManager.AppSettings.Get("MYConnectionstring");

       SqlConnection con;

       SqlCommand cmdupdate;

       public int Update_Password(String Password,int id)
       {
           con = new SqlConnection(strcon);

           cmdupdate = new SqlCommand();

           cmdupdate.CommandText = "dbo.prc_Update";

           cmdupdate.CommandTimeout = 0;

           cmdupdate.CommandType = CommandType.StoredProcedure;

           cmdupdate.Parameters.Add("@Password", SqlDbType.VarChar, 40).Value = Password;

           cmdupdate.Parameters.Add("@UserID", SqlDbType.Int, 4).Value = id;

           cmdupdate.Connection = con;

           int Results = 0;

           try
           {
               con.Open();

             Results = cmdupdate.ExecuteNonQuery();

           }
           catch (SqlException)
           {
               throw;
           }
           finally
           {
               con.Close();
           }
           return Results;

       }