Syntax error in INSERT INTO statement. asp.net

Question

can i ask about this, im getting syntax error in INSERT INTO statement. whenever i press ctrl+f5. is there anything missing with my code?

Protected Sub btnEnter_Click(sender As Object, e As System.EventArgs) Handles btnEnter.Click

    Dim CID As Integer = CInt(lblCno.Text)
    Dim tRentID As String = txtRentID.Text
    Dim pList As String = ProductList.Text
    Dim tDate As Date = lblDue.Text
    Dim amount As Integer = CInt(txtAmount.Text)
    Try
        Dim dbconn1, dbcomm1, dbex1, sql1
        dbconn1 = New OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0;" & "Data Source=" & Server.MapPath("~/App_Data/aspDatabase.mdb"))
        dbconn1.open()
        sql1 = "Insert into order VALUES ( " & "'" & tRentID & "'" & "," & "'" & tDate & "'" & "," & "'" & amount & "'" & "," & "'" & CID & "'" & "," & pList & ")"
        dbcomm1 = New OleDbCommand(sql1, dbconn1)
        dbex1 = dbcomm1.executenonquery
        dbconn1.Close()
    Catch ex As Exception
        lblOut.Text = ex.Message
    End Try
End Sub
End Class

I would strongly encourage you to use parameterized queries. This insert statement is a SQL injection disaster waiting to happen — TGH
– TGH, Commented Jul 28, 2013 at 3:37
@TimothyHenrySusanto You can make your statement easier to read by reducing, for example, & "'" & "," & "'" & to & "','" &, but parameterized queries are the best option. — Andy G
– Andy G, Commented Jul 28, 2013 at 3:41

Andy G · Accepted Answer · 2013-07-28 03:51:57Z

3

ORDER is a reserved keyword. Surround it in square brackets [order] (or back-ticks, depending on the database you are using). It is square brackets for Access.

edited Jul 28, 2013 at 3:51

answered Jul 28, 2013 at 3:34

Andy G

19.4k5 gold badges49 silver badges70 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Syntax error in INSERT INTO statement. asp.net

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related