C#

SELECT * FROM MyTable WHERE StreetAddress = 'Baker's Wood'

SELECT * FROM MyTable WHERE StreetAddress = 'x';DROP TABLE MyTable;--'

SELECT * FROM MyTable WHERE StreetAddress = 'x';

DROP TABLE MyTable;

--'

INSERT INTO myTable (myColumn1, myColumn2) VALUES (@C1, @C2)

OriginalGriff wrote:

and the VB was written by an idiot.

Bastard Programmer from Hell
If you can't read my code, try converting it here[^]
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

Eddy Vluggen wrote:

OriginalGriff wrote:

and the VB was written by an idiot.

public class SwitchOnDTOrdinal
{
    public SwitchOnDTOrdinal(DataTable table)
    {
        TheTable =  table;

        validColumnNames = table.Columns
            .Cast<DataColumn>()
            .Select(col => col.ColumnName)
            .ToList();
    }

    private List<string> validColumnNames;

    private DataTable TheTable;

    public void SwitchA(string cname)
    {
        if (! validColumnNames.Contains(cname))
        {
            throw new ArgumentException(@"{cname} is not a valid column name");
        }

        switch(TheTable.Columns[cname].Ordinal)
        {
            case 0:
                break;
            case 1:
                break;
            case 2:
                break;
            case 3:
                break;
            default:
                throw new ArgumentOutOfRangeException();
        }
    }
}

HoaiNTT0610 wrote:

Look forward to the help of all