Adding strings with special characters within in SQL Server database by C# ASP.NET application

Question

How can I add in a table with a column of type string (in SQL Server) an string like "[email protected]" , I have problems with special character('@' in this case).Thanks

System.Data.SqlClient.SqlConnection con = new System.Data.SqlClient.SqlConnection(
                         "Data Source=BOGDAN-PC\\BOGDAN;Initial Catalog=ePlanning;Integrated Security=SSPI;Connect Timeout=10;TrustServerCertificate=True ");
                string[] id_dep = ddDepartament.SelectedItem.Text.Split('.');
                con.Open();



                string final = tbemailangajat.Text.

                string sqlstring = " Update angajati set nume='" + tbNumeangajat.Text + "' ,prenume= '" + tbPrenumeangajat.Text + "',email= '" + final + "',telefon= '" + tbTelefonAngajat.Text + "',id_functie= " + ddFunctieAngajat.SelectedItem.Text[0].ToString() + ",id_departament= " + ddDepartament.SelectedItem.Text[0].ToString() + " where id_angajat = " + int.Parse(tbID.Text) + ";";
                System.Data.SqlClient.SqlCommand comm = new System.Data.SqlClient.SqlCommand(sqlstring, con);
                //  System.Data.SqlClient.SqlDataReader reader;
                comm.ExecuteNonQuery();
                con.Close();

I already made my table with an column named Email, and the type is varchar(50), and when I try to add a row with a string of like "[email protected]" for the column Email, the row is nod added — TBogdan
– TBogdan, Commented Jul 11, 2012 at 17:06
that's does not describe your problem enough. Was there an error? Where is your code? — codingbiz
– codingbiz, Commented Jul 11, 2012 at 17:07

Jason Meckley · Accepted Answer · 2012-07-11 17:15:04Z

2

don't use sql injection, use parameterized queries instead.

command.CommandText = "insert into table (column) values(@p1)";
command.Parameters.AddWithValue("p1", "[email protected]");

answered Jul 11, 2012 at 17:15

Jason Meckley

7,6011 gold badge26 silver badges46 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Jen Grant · Accepted Answer · 2012-07-11 17:12:34Z

0

varchar should allow for the @ symbol, but for some symbols it requires nvarchar instead of varchar. nvarchar stores unicode and is used to support symbols outside of the ASCII range.

answered Jul 11, 2012 at 17:12

Jen Grant

2,07416 silver badges14 bronze badges

4 Comments

TBogdan Over a year ago

so I have to drop my table and built it again,that's the only way now?

Jen Grant Over a year ago

If you are going to support international charachters you will probably have to recreate the table (or set the option to let the manager do it for you). I agree that parameterizing your query is best, but looking at your query, it should allow you to insert the @ symbol.

Jen Grant Over a year ago

The option to allow the tool to recreate the table when you change the field type in Management Studio is Tools > Options > Designers and then uncheck the following option "Prevent saving changes that require table re-creation"

TBogdan Over a year ago

can't find designers option, hmmm

Collectives™ on Stack Overflow

Adding strings with special characters within in SQL Server database by C# ASP.NET application

2 Answers 2

Comments

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related