Click here to Skip to main content
15,884,537 members
Please Sign up or sign in to vote.
1.00/5 (1 vote)
See more:
SqlCommand cmd = new SqlCommand("update common_setting set first_name='" + txtWard.Text + "',per_visit_dr_charges='" + txtDr.Text + "', new_case_charges='" + txtCase.Text + "',where id=" + Request.QueryString["id"].ToString(), sc);




help me to solve this error
Posted
Updated 4-Apr-14 10:16am
v2

That means one of the objects you are using has not been instantiated before you are attempting to use it. Put a breakpoint and see which object it is.

Also, it is a bad idea to concatenate a string for a query. You should be using parameterized queries to avoid SQL injection.
 
Share this answer
 
It simply tells you that at least one of the objects in your expressions are null, because you never initialized it.

Not to worry. This is one of the very easiest cases to detect and fix. It simply means that some member/variable of some reference type is dereferenced by using and of its instance (non-static) members, which requires this member/variable to be non-null, but in fact it appears to be null. Simply execute it under debugger, it will stop the execution where the exception is thrown. Put a break point on that line, restart the application and come to this point again. Evaluate all references involved in next line and see which one is null while it needs to be not null. After you figure this out, fix the code: either make sure the member/variable is properly initialized to a non-null reference, or check it for null and, in case of null, do something else.

Please see also: want to display next record on button click. but got an error in if condition of next record function "object reference not set to an instance of an object"[^].

Sometimes, you cannot do it under debugger, by one or another reason. One really nasty case is when the problem is only manifested if software is built when debug information is not available. In this case, you have to use the harder way. First, you need to make sure that you never block propagation of exceptions by handling them silently (this is a crime of developers against themselves, yet very usual). The you need to catch absolutely all exceptions on the very top stack frame of each thread. You can do it if you handle the exceptions of the type System.Exception. In the handler, you need to log all the exception information, especially the System.Exception.StackTrace:
http://msdn.microsoft.com/en-us/library/system.exception.aspx[^],
http://msdn.microsoft.com/en-us/library/system.exception.stacktrace.aspx[^].

The stack trace is just a string showing the full path of exception propagation from the throw statement to the handler. By reading it, you can always find ends. For logging, it's the best (in most cases) to use the class System.Diagnostics.EventLog:
http://msdn.microsoft.com/en-us/library/system.diagnostics.eventlog.aspx[^].

There is one more serious but apparent problem: you compose your query using concatenation of some strings obtained from UI. You should never ever do it, by several reasons. The most important one is: you make yourself application the easiest target for the well-known exploit called SQL injection. This is how:
http://xkcd.com/327[^].

For further detail, please see my past answers:
EROR IN UPATE in com.ExecuteNonQuery();[^],
hi name is not displaying in name?[^].

This is what you should use: http://msdn.microsoft.com/en-us/library/ff648339.aspx[^].

Good luck,
—SA
 
Share this answer
 
Comments
Philippe Mori 4-Apr-14 16:53pm    
Very good answer. Worth 10 points!
Sergey Alexandrovich Kryukov 4-Apr-14 18:40pm    
Thank you very much, Philippe.

It's getting a bit late, but... have you seen my 1st of April publication yet?
Power Over IP: Testing of the First Experimental Facility

Hope it can add some good mood for you; and your could ask me some difficult questions, as other members did. :-)

—SA
Rahul VB 5-Apr-14 15:32pm    
Very nice Sir, long time dint speak. How have you been?
Sergey Alexandrovich Kryukov 5-Apr-14 17:57pm    
Thank you, Rahul; not bad at all. Published my 1st of April article. Have you seen it yet? It's a bit late, but:
Power Over IP: Testing of the First Experimental Facility.

Hope it will add to some good mood.
—SA
Rahul VB 6-Apr-14 0:28am    
Give me just a moment ,I will have a look at it. Sir, just a question: How much time does it take to write an article? actually due to office i am not able to concentrate on writing an article.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
Top Experts
Last 24hrsThis month


CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900