I am trying to update a records by calling a SPROC throgh my SQLDataAdapter.Here is my code in this order :
[Code]....
I have looked for parms which are field names with the @ in front but I can't seem to locate them in my code.I could use the assistance of a fresh pair of eyes.
[Code]....
View 2 RepliesI have a sproc that will insert a new record into Table1. Next I need to Insert into another table the scope_identity of the inserted record. How do I incorporate the scope_identity value as the insert parameter in the second insert statement?
View 3 RepliesI know the following sproc is vulnerable to SQL injection:
[Code]....
I would like to write a call to this sproc that uses SQL injection to execute the additional command:
[Code]....
That way, I can demonstrate the vulnerability of the sproc to SQL injection and test any revised implementations of the sproc using the same test call.
Problem is, SQL injection is harder than I thought! I just can't seem to do it.
Can anyone provide me with text for the sproc call to execute the additional command?
I have to be able to dynamically change the sproc name that is used in a Linq to SQL query. I see in the dbml designer this:
[Function(Name="dbo.InsertUnknownMessage")]
[Code]....
pass values to sproc from sproc?
I dont understand why this is occurring, my store pro worked ok before (and i am very sure i am not passing too many arguments to the store pro) but since i have switched to using a "formview"control it has stopped. store pro and ASP.NET with sql data source are shown below. Apologies if the formatting nacks up.
View 3 Replies- When I execute my query within Enterprise Manager giving the "Country" parameter a value of US, it returns the expected records
- When I assigned that value either programmatically or within the SelectParameters of my SqlDataSource, no rows are returned at all...
I have this as a parameter in the sproc:
@Country char(2) = NULL
and the relevant WHERE clause entry is:
AND (@Country IS NULL OR a.CountryCode = @Country)
My SelectParameter is:
asp:Parameter Name="Country" />
I've tried adding the "DefaultValue" property set to "US" and also tried setting it as sds.SelectParameters[4].DefaultValue="US"
When I do either of these things I get no records returned...
I am using 3 web controls ,two are cascading dropdownlists used to filter gridview control bound to a datasource.
My question is , How to define multiple queries in stored procedure that takes parameter values from the controls declared using sqldatasource.Also, return all data when i set default control value to say 'null'.
NB: one paramaterised query for cascading dropdownlists and another for other control.
I have a page has Listview and Datapager inside UpdatePanel. When I refresh the new SQL results and bind by pressing link buton outside of the update panel, I get correct results. (get new SQLselect statment, rebind to listview, update updatepanel)
However, the SelectCommand is not bound right or some other reason, if I press datapager, I won't get no results.
I'm guessing it's caused by not passing new dynamic selectcommand since my datapager and listview works first update.
Is there a way to copy a row from one table and insert to another but at the same time insert extra values to destination table?Let's say source table Item has values:
ItemID
ItemType
ItemProducer
ItemModel
Destination table ItemHist:
ItemID
ChangeDate
ChangeReason
ChangedBy
ItemType
ItemProducer
ItemModel
I want to copy row from source table where itemid is 25, insert it into destination table and add extra values: ChangeDate, ChangeReason, ChangedBy. I tried:
INSERT INTO ItemHist (ItemID, ChangeDate, ChangeReason, ChangedBy, ItemType, ItemModel) VALUES (ItemHist.ChangeDate=GetDate(), ItemHist.ChangeReason="why not", ItemHist.ChangedBy="me")
SELECT ItemID, ItemType, ItemProducer, ItemModel FROM Item WHERE ItemId=25
but obviously it didn't work ("The name 'ChangeDate' is not permitted in this context. Only constants, expressions, or variables allowed here. Column names are not permitted.").
I am having an issue when trying to update a ModifiedDateColumn in the database via LINQ. I am setting the ModifiedDate property (which is a DateTime in both SQL Server and my code) using DateTime.Now. I am getting an error where LINQ is generating too many precisions when generating the SQL to execute. Here is what the LINQ is generating (see @p3 & @p5)
[Code]....
How do I get LINQ to only generate to only 3 decimal places?
I have a Gridview with a templated column that gets a True/False value from the SQL Datasource. The value displays as a string in a label in the template. I added a RadioButtonList and in the RowDataBinding event put in some logic to set the appropriate radio button based on the text value of the Label.
Now I want to be able to interrogate the RBL upon update and set the Label text accordingly. I tried the Row_Updating event but that doesn't have a handle on the row itself and the RBL is not in the NewValues or OldValues collection since it's not one of the bound fields. I tried the RBL_SelectedIndexChanged event but I can't get the current row (got a handle on the Gridview but Gridview.SelectRow and Gridview.SelectedDataKey are both null).
how to interrogate the RBL and set the Label so the correct value is passed back to the datasource for update?
I am trying to create strogly typed datasets for my project. When I right click on the xsd file that I need to generate a strongly typed dataset for I can't find the 'Advanced' properties as described in the below article (almost half way down)[URL]As I do not see the Advanced properties option I can't find the 'Custom Tool' property/option to set its value to 'MSDatasetGenerator'. Do I have to install some kind of patch on my VS 2005?
View 5 RepliesProcedure or function "editdoc" has too many arguments specified?
Stored Procedure: set ANSI_NULLS ON
I receive lists from a web service and then I convert the lists to datatable and then I add the datatables to a dataset and from there I get the xml from the dataset where I can save it into a sql database. But the problem is that the xml has /r/n between all attributes and elements. I dont know how to get this out of the xml. Can this be because of my converter. If so can anyone give me a better way to get multiple lists into a dataset.
View 2 RepliesDepending on the data returned from a Stored Procedure, I need to add specific controls to a page and then when they are populated by the user, write them back to the database. What is the easiest way of doing this?
View 9 RepliesHow can I find the 5 last records ?
CREATE PROC [dbo].[SP_NEWS_SELECT]
(
@NB_NEWS int,
@ID_NEWS int,
@DT_PUBLICATION datetime
)
AS
SELECT TOP @NB_NEWS *
FROM [REP_CLI].[S_ETATS].[T_NEWS]
ORDER BY [DT_PUBLICATION] ASC
This does not work
I created a database on SQL Server 2005 developer edition with MS SQL Server Mangement Studio Express. Now I created code that accessess a stored procedure named 'pS_TableData'. However I have one problem the code raises an exception "Could not find stored procedure 'pS_TableData 'Letters''."the code looks like this:
[Code]....
Note I am using (for now) the same connection that I used to create my database so in essence my web site is the administrator. I tried a simple SELECT from a table with the same connection and it raised no exceptions!When I run EXECUTE ps_TableData 'Letters' in SSMS it has no . I also tried EXECUTE ps_TableData 'Letters' as the command paramated for SqlCommand but it had the same effect
I have to write a stored procedure to get the biggest two values out of three in three different columns in the same table.
I have a table , for instance,
total marks1 - column1 ( eg values - 1000)
total marks2 - column 2 (eg values - 500)
total marks3 - column 3 (eg values - 800)
i have to get (return the value) 1000 and 800.
best Way to find out if record exists?
[Code]....
how to find particular date is Sunday or not? in sql 2000
View 3 RepliesI have a Windows 2003 test server hosting an asp.net 2.0 application and Sql Server 2005 running as Sql Server 2000(80).During a recent a security review we decided that it wasn't such a hot idea to use sql authentication with an sysadm user as the database user for the asp.net application. Having done a bit of reading (http://msdn.microsoft.com/en-us/library/ms998258.aspx#pagguidelines0001_dataaccess) I decided to use a lower privilege database user account and windows authentication.Starting from scratch I created a new custom service account (http://msdn.microsoft.com/en-us/library/ms998297.aspx) and assigned this to the process identity for the application pool.I then created a new database login and user for this account. I added the db_datareader and db_datawriter roles to this user and I also granted EXECUTE permissions for user defined stored procedure and functions. However when I started the application I got this error 'User does not have permission to perform this action.Cannot find the object 'AspNet_SqlCachePollingStoredProcedure', because it does not exist or you do not have permission.' - after a quick hunt I found thishttp://forums.asp.net/p/1487216/3493362.aspx and followed the advice herehttp://msdn.microsoft.com/en-us/library/system.web.caching.sqlcachedependencyadmin.aspx and granted the user CREATE TABLE and CREATE PROCEDURE permissions.Still no joy - after digging around and looking at sql profiler I found what I believe to be the offending piece of sql:
/* Create notification table */
...sql
/* Create polling SP */
..more sql
..finally
GRANT EXECUTE ON dbo.AspNet_SqlCachePollingStoredProcedure to aspnet_ChangeNotification_ReceiveNotificationsOnlyAccess
My understanding is that to issue 'GRANT EXECUTE' the user must db_owner or db_secadmin. Indeed it all works fine if I give the service account user login the db_owner role.This sql is caused by: SqlCacheDependencyAdmin.EnableNotifications(ConnectionString), this is called once and once only by the application start event.Is there a work around for this? I would like to use the lower privilege account as per best practice but this issue is making it tricky.
I think that type of data types is really smart.and hope some can help me with something more.I could not find any links about it.Right now, I can only make a getdata (), which shows all data:
[code]...
I have created a table in my SQL database that has a primary column (Title) and another column named Callsign. How can I access the table row that has a certain title and Callsign using C# in a web page event handler?
View 7 Replies