It's probably something small but I can't seem to find what went wrong. I am trying to insert information into my database. It goes through the code just find but it doesn't insert into my database. Here's my code:
[Code]....
Here's my webconfig connection string:
[Code]....
I have some issues about retrieveing and storing date information to my database (ms sql server 2005).My data column is a DateTime, and i have set my web.config globalization culture is set to "en-gb"
When i retrieve date from the datebase it appears as dd/MM/yy, that's fine. But i cannot insert a new date as same format?! It will only accept MM/dd/yy or yy/mm/dd.Right now i'm using this code to correct the error:
[Code]....
Is it possible to change the date format on the database or something, so i dont need to use this code?
I would like to check my database for to see if a user name is available but my script isn't working.
I am taking input from a text box call unametextbox and i'm trying to extract any matching username from the database, this is my code.
[Code]....
Basically the main page has a couple of DataSourceObjects sucking information from a local database and displaying them on the page. The page is a form, which then generates an HTML email and fires it off using the SMTPClient. The problem is that I cannot seem to get the data from the database to be accessable from the code-behind. Attempting to get data from either of the ListViews results in a number of Null Exception errors, mainly when using the ExtractItemValues method. The OrderedDictionary that comes back always seems to be empty. So I figured I'd use one of the 3 Object Data Sources I already have set up, that queries the actual database, but cannot find any way of calling the Select statement present in either of them, let alone managing to store and access what comes back.
View 1 RepliesI have a website that displays information from my database into a gridview. The gridview has a checkbox, that once selected, is suppose to move a 'Y' into the field that has the checkbox selected. I have it generating the code, and displaying the code on my page to confirm, but the database is not being updated. Here is my code,
[Code]....
I'm using Content Management System, DotNetNuke for my dynamic website. DNN itself they have one database, I named it dnnDB. Inside the dnnDB they have the users table which have the list of users. I need to be able to pull this set of information or synchronize to my own database, myDatabase for development purposes. I do not want to incorporate my database into dnnDB, afraid that I may corrupt the system.
View 4 RepliesIn the table save your credit card.I want to encrypt all credit card information to be recorded in the database.
View 2 RepliesI build a webpage to edit the data entry, all the textbox wroks fine. However when I update the value originally took in using dropdown list , I get error and couldn't get correct update.
View 2 RepliesiI am using Two textboxes and one button.one textbox is for Fromdate and Another textbox is for Todate.i am selecting date from textboxes using Ajex calenderExtender.i want to insert every date(Fromdate to Todate) in database on button click.Example Like:i select 12/30/2010 (MM/DD/YYYY) in FromDate textbox and 01/05/2011 (MM/DD/YYYY) in Todate text box. Now i want to insert these dates
12/30/2010
12/31/2010
01/01/2011
01/02/2011
01/03/2011
01/04/2011
01/05/2011
in database on button click how to insert eveydate in database?
i want to store year like 1990 to 2010 in database.i have no table in database.
is there any method to create and store the year in one query internally?
i use sql server 2005.
I m uploading a text file. I want to read that text file line by line and I want to save that data into database if there are no errors in that text file. I have 5 different columns in database and I want to take those 5 columns data in the text file and insert into respective columns.
For this, which is the best way to do. Can we read and insert data into respective fields in no time.
<asp:DropDownList ID="DropDownList1" runat="server" DataSourceID="NameSource"
DataTextField="Choice" DataValueField="Appliers" AutoPostBack="True">
</asp:DropDownList>
I want to insert into database with the following code. I want the Appliers instead of Choice to be inserted. Now this code insert the Choice field only
I want to insert the symbol α (alpha) to the database.
i am using the field type as nvarchar
when i directly copy-paste it to database it works
when i try it over sql it is entering as 'a'
how can I insert a list (of int) to table?
View 1 RepliesIm a PHP programmer and now I'm try to do some work with ASP.NET but I got into trouble just in the first stage of my application.Can Anyone help me find out how to get the user inserted values from CreateUserWizard and insert it to sql database. I have implemented using the following codes, but I keep getting the error message "The name 'identifier' does not exist in the current context". I have tried different approaches but any of them worked.Code:.aspx
<%@ Page Title="Register" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true" CodeBehind="Register.aspx.cs" Inherits="PaperReviewSystem.Account.Registe
[code]...
I have Gridview on my webapplication and it is getting filled with multiple rows . When clicked on Save I want to Insert all rows without calling multiple database hits.
Is there any way I can insert all rows by single db hit?
I want to insert almost 400 rows in one database call in asp.net. I am using .net 3.5 and sql server 2005. What should be the best possible way for doing that?.
View 1 Repliesthe code to insert the data from asp.net application to sql database table
like user registration form filelds in sql db table
I am generating a unique Ref number using this sql statement: SELECT REPLACE(STR(CAST(CAST(NEWID() AS binary(5)) AS bigint),12),0,0) as REF Subsequently, I need to insert this REF into sql database table in stored procedure. Here is what I did in my stored procedure:
USE [iBankRecords]
GO
/****** Object: StoredProcedure [dbo].[stp_addPayee] Script Date: 07/05/2010 21:57:07 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
ALTER PROC [dbo].[stp_addPayee]
(
@CUSTID char(10),
@PAYEEACCNUM nvarchar(20),
@PAYEEACCTYPE char(10) ,
@PAYEENAME char(20),
@PAYERINITIAL char(20),
)
AS
DECLARE
@ReturnValue int
INSERT INTO PAYEE (CUSTID, PAYEEACCNUM,PAYEEACCTYPE,PAYEENAME,PAYERINITIAL, REF)
VALUES (@CUSTID,@PAYEEACCNUM,@PAYEEACCTYPE,@PAYEENAME,@PAYERINITIAL, REF)
IF @@ERROR<>0
BEGIN
PRINT 'ERROR'
SET @ReturnValue=1
RETURN @RETURNVALUE
END
ELSE
BEGIN
SET @ReturnValue=0
RETURN @RETURNVALUE
END
May I know how do I have generating a unique ref num and inserting the REF into the above statement?
I have to in sert the gridview values into database, the values can be single or more than one values, so here i have to use the XML to store the data, but my question is?
i have to sent the values as a string, to the database, so how i convert that, and how could i retrieve the values as it is, and stored or display to the another gridview.
im using asp.Net 2005
How to write a Sql Query for insert, Delete for Image from sql server 2005.
View 2 RepliesI want to insert a particular value against a range of dates into my sql server database from the front end using c#.
the table has the column date and worker. so i desire that the user writes the name of the worker and then enters a From and To range into two textboxes so that thorugh a loop function the name of the worker gets written into the table along with the range of chosen dates.
I want to be able to insert any kind of text into a sql 2005 database. The column im using to store this is ofVARCHAR(MAX) type . Basically , even if the text contains special charectars or unicode content or html tags I should still be able to insert it into the database without any errors. Please guide me on how to achieve this.Things I tried that did not work !- changed the column to type NVARCHAR(MAX)-Tried Server.HTMLencode for the column that accepts the textIs regex a solution for this problem. If so how can i implement it?
View 8 RepliesI have been in the process of updating my code with security methods, and I've been learning this from [URL] (or "Security Guidelines: ASP.NET 2.0"). In the middle of the page under "When Constructing SQL Queries, Use Type Safe SQL Parameters" it says "Use type safe parameters when constructing SQL queries to avoid possible SQL injection attacks that can occur with unfiltered input". Now, what they suggested was to use code like:
"DataSet userDataset = new DataSet();
SqlDataAdapter myCommand = new SqlDataAdapter(LoginStoredProcedure", connection);
myCommand.SelectCommand.CommandType = CommandType.StoredProcedure;
myCommand.SelectCommand.Parameters.Add("@au_id", SqlDbType.VarChar, 11);........"
But, I was already using code like:
"var dataSource = (SqlDataSource)form1.FindControl("sqlDataSource5") ;
dataSource.UpdateParameters.Add("someVal", val);"
So now, to use type safe parameters, I decided to include it like:
"var dataSource = (SqlDataSource)form1.FindControl("sqlDataSource5") ;
dataSource.UpdateParameters.Add("@someVal", DbType.Int16, val);
dataSource.UpdateParameters["@someVal"].Size = 1;"
So, that would be how I would modify my current code base to use type safe parameters in sql updating/inserting.
Getting to my actual question, as it was said "Use type safe parameters when constructing SQL queries to avoid possible SQL injection attacks that can occur with unfiltered input". First off, this suggests that this should apply to unfiltered input. Also, in their example they only did this for an ID.
So, what I'd like to know, when it comes to "unfiltered input", does this mean as long as the input is unfiltered I must use type safe parameters, or even filtered input shall have this (just to be sure), like, input that has been ran through a regularexpression check? Shall I do this for all values I insert/update into the database, or just IDs and important things?
The way I see it right now is that it would be a good precaution to just do type safe checks on everything (literally) that updates/inserts into the database just to be extra safe. But, I really am unsure if this is really the best idea, because if I did, would this possibly cause overprocessing of information? Can this cause too much strain on server resources? If my fears serve true, what would be a good suggestion of how I could implement this properly without having to worry about what I said?
I am using an SQL Express server hosted on a different machine and it is listed in my server explorer just fine. It is listed as my connection string in my web.config just fine as well and lastly it seems to sync just fine with my asp.net membership tables. My question is does it need to be listed in my app data folder of my site? Currently I have the ASPNETDB.mdf connection listed, which is apparently just a local sql express connection. The database I am using in my webconfig and other files is not listed so do I need to add it there?
Second question is about DAL, Data Access Layers. I have mostly been using presentation level SQL commands with my data presentation controls. Manually entering separate select, insert and update statements. I just went through a tutorial that stated the best way to interact with your database in asp.net is with DAL using table adapters. It mentioned that it gives you the ability to use strongly-typed references to each row. My question is can I use the same method multiple times on a single page. For instance a method inside an adapter named GetProductsByID(@ID) ? What if I want this bound to three different gridviews on a single page? Anyone have any other general things to point out about using DAL over presentation level commands?