Error: Syntax error in INSERT INTO statement in command.ExecuteNonQuery()

Question

I get the error Syntax error in INSERT INTO statement in following line command.ExecuteNonQuery();

BTW, I already red some similar posts and I tried to fix my problem but I could not able to do so.

My database is MS Access.

Any help will be great!

private void btn_register_Click(object sender, EventArgs e)
        {
            if (string.IsNullOrEmpty(txt_name.Text) || string.IsNullOrEmpty(txt_family.Text))
            {
                MessageBox.Show("Some information is missed");
            }
            else
            {
                this.Hide();
                connection.Open();
                OleDbCommand command = new OleDbCommand();
                command.Connection = connection;
                command.CommandText = " insert into Login (FirstName,FamilyName,UserName,PassWord,RepeatPassword,Email,MaxTime,LearningStyle) values ('" + txt_name.Text + "','" + txt_family.Text + "','" + txt_username.Text + "','" + txt_password.Text + "','" + txt_repeat.Text + "','" + txt_mail.Text + "','" + UpDownTime.Value + "','" + UpDownLearningStyle.Value + "')";
                command.ExecuteNonQuery();
                MessageBox.Show("Your Registeration was successfull !");
                connection.Close();
                Login F1 = new Login();
                F1.Show();  

            }

        }

Debug and copy the value of CommandText i.e. constructed query and run it in Access directly. Does it work? Did you try that? — Nikhil Vartak
– Nikhil Vartak, Commented Oct 21, 2015 at 11:52
Also note that, saying I tried to fix my problem but I could not is not sufficient, you need to actually show what you tried! — Nikhil Vartak
– Nikhil Vartak, Commented Oct 21, 2015 at 11:53
More important, you should always use parameterized queries. This kind of string concatenations are open for SQL Injection attacks. And use using statement to dispose your connection and command. — Soner Gönül
– Soner Gönül, Commented Oct 21, 2015 at 12:04

jLaw · Accepted Answer · 2015-10-21 11:56:23Z

1

Try this. maybe it could help

Password is a reserved keyword

command.CommandText = " insert into Login (FirstName,FamilyName,UserName,PassWord,RepeatPassword,Email,....

try this

command.CommandText = " insert into Login (FirstName,FamilyName,UserName,[PassWord],RepeatPassword,Email,.....

answered Oct 21, 2015 at 11:56

jLaw

3024 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Error: Syntax error in INSERT INTO statement in command.ExecuteNonQuery()

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related