Getting error on running a sql statement

Question

I have an error running this statement in vb.net.The following error ERROR [42000] [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'Request.GodownFROM Request WHERE (((Request.Rdate)=#03/27/2017#) AND ((Request.Godown)='Indian''.

sql = "SELECT Request.[Rdate], Request.[Item Name], Request.[Category], Request.[Unit], Request.[Quantity], Request.[Rate], Request.[Amount], Request.[Godown]" _
          & "FROM Request WHERE Request.[Rdate]=#" & dtrdate.Value & "# AND Request.[Godown]='" & lblgodown.Text & "'"

    Dim da As New System.Data.Odbc.OdbcDataAdapter(sql, con)

    da.Fill(dt)
    dgtvgo1.DataSource = dt

You should use prepared statements to avoid SQL injection.

Tim Biegeleisen
– Tim Biegeleisen

2017-03-27 05:43:49 +00:00
Commented Mar 27, 2017 at 5:43 — Tim Biegeleisen
– Tim Biegeleisen, Commented Mar 27, 2017 at 5:43

Dave · Accepted Answer · 2017-03-27 05:38:47Z

2

You need a space before the "[from...]". So change the second line to " [from..."

answered Mar 27, 2017 at 5:38

Dave

1561 silver badge10 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Tim Biegeleisen Over a year ago

Hi Dave, if you feel the question is wrong only in having a small typo, then vote to close the question rather than answering it.

Deb Over a year ago

Thanks, I know this will be a small mistake somewhere. I have encounter the same problem before and solved it the same way. But somehow I missed this time.

Dave Over a year ago

Tim - seroiously? Close the question rather than helping the person with an answer? I will never understand the protocol on this site.

Collectives™ on Stack Overflow

Getting error on running a sql statement

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related