Adding data into Date datatype in SQL Server

Question

I need to update a date field in a table that's of type DATE with data from DateTimePicker control

I changed the format of the control as updated the table as shown below

dtp1.Format = DateTimePickerFormat.Custom
    dtp1.CustomFormat = "yyy-MM-dd"

query = "INSERT INTO student_attendance_table(regno,date,year,batch) VALUES('1138M0343', " & dtp1.Text & ",  " & year & ",  " & batch & ")"
        con.Open()
        cmd = New SqlCommand(query, con)
        cmd.ExecuteNonQuery()
        con.Close()

But the table is not getting updated. Instead showing the following error

Operand type clash: int is incompatible with date

Can you explain more on what you just said. I can't understand — Random User
– Random User, Commented Jul 23, 2013 at 15:31
SQL Injection alert - you should not concatenate together your SQL statements - use parametrized queries instead to avoid SQL injection — marc_s
– marc_s, Commented Jul 23, 2013 at 15:42

Random User · Accepted Answer · 2013-07-23 15:43:59Z

1

I found the solution

' " & dtp1.Text & " '

Forgot to put the single quotation

answered Jul 23, 2013 at 15:43

Random User

3654 gold badges8 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Chase Ernst Over a year ago

This is what marc_s, and Brad M were talking about. You where concatenating your SQL statement together when you did not have the single quotations. That left your statement vulnerable to SQL injection.

Collectives™ on Stack Overflow

Adding data into Date datatype in SQL Server

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related