Pass arguments from C# objects to SQL [duplicate]

Question

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;

namespace iss_farmacie_spitali
{
    public partial class Form1 : Form
    {
        public Form1()
        {
            InitializeComponent();
        }

        private void button1_Click(object sender, EventArgs e)
        {
            sqlConnection1.Open();
            sqlCommand1.Parameters.AddWithValue("user",textBox1.Text);
            sqlCommand1.Parameters.AddWithValue("pass",textBox2.Text);
            sqlCommand1.CommandText = "SELECT id,parola FROM ANGAJAT WHERE id=(user) AND    parola=(pass)";
            if (sqlCommand1.ExecuteNonQuery()!=null)
                MessageBox.Show("ESTE");
            sqlConnection1.Close();
        }
    }
}

What I hope to accomplish is build a functional login. I have the database, a table named "angajati"(employees) containing id(a username practically) and parola(which is password). What I want to know it I can introduce "variables" within the SQL script text to have it run like a function and simply pass the values from my text boxes. This is what I made up from other examples but it doesn't seem to work. Could anybody give me a bit of insight upon the matter?

I think perhaps you should look here for the answer you seek: stackoverflow.com/questions/4624811/… — Maurice Reeves
– Maurice Reeves, Commented Jun 6, 2013 at 1:41

pinkfloydx33 · Accepted Answer · 2013-06-06 01:44:24Z

3

private void button1_Click(object sender, EventArgs e)
        {
            sqlConnection1.Open();
            sqlCommand1.Parameters.AddWithValue("@user",textBox1.Text);
            sqlCommand1.Parameters.AddWithValue("@pass",textBox2.Text);
            sqlCommand1.CommandText = "SELECT id,parola FROM ANGAJAT WHERE id='@user' AND    parola='@pass'";
            if (sqlCommand1.ExecuteNonQuery()!=null)
                MessageBox.Show("ESTE");
            sqlConnection1.Close();
        }

answered Jun 6, 2013 at 1:44

pinkfloydx33

12.9k3 gold badges54 silver badges70 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Blorgbeard Over a year ago

You don't need quotes around the parameters in the SQL.

Collectives™ on Stack Overflow

Pass arguments from C# objects to SQL [duplicate]

1 Answer 1

1 Comment

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Linked

Related