ASP.NET

21-Nov-06 3:11

Hi,

I have an SP which provides all the data for a datagrid to be populated(Just like a view). With a view, I would just say something like:

Select * From vw_View
And then fill a dataset..

What is the deal when I need to use a Stored Procedure instead of a view? How do I retrieve the info?

Thanks.

coolestCoder21-Nov-06 3:15

coolestCoder

21-Nov-06 3:15

Hi,
If you want a result from stored procedure just run the select query in the store procedure and use the data adapter to fill a dataset. As easy as it sounds.
Hope i am clear enough.

"A good programmer is someone who looks both ways before crossing a one-way street." -- Doug Linder

coolestCoder

Dayekh21-Nov-06 3:41

21-Nov-06 3:41

Thanks for the reply!

Here what I have when I use a view:

<br />
Dim ds As DataSet = New DataSet<br />
            Dim Conn As SqlConnection = New SqlConnection(WebConfig.ConnectionString)<br />
            Dim sTable() As String = {"tblRequest"}<br />
            Dim sSql As String<br />
<br />
            sSql = "SELECT * FROM vw_Quote2 "<br />
<br />
            If iProjectID > 0 And iStageID > 0 Then<br />
                sSql = sSql & " WHERE inProjectID = " & iProjectID & " AND inStageID = " & iStageID<br />
            ElseIf iProjectID > 0 And iStageID = 0 Then<br />
                sSql = sSql & " WHERE inProjectID = " & iProjectID<br />
            End If<br />
<br />
            sSql = sSql & " Order By vchStageNumber"<br />
<br />
            SqlHelper.FillDataset(Conn, CommandType.Text, sSql, ds, sTable)<br />
<br />
            Return ds

Now that I am useing the SP, I have All my SELECT statements in there BUT, I do not have the conditions for those 2 Dropdowns. I dont know how to encorporate them. Also, I do not know how to use the SP in this case.

Sorry if I sound a bit dumb, but things arent clicking with me lately. I am finding it very hard to understand get my head around SPs Frown | :(

Thanks again!

Colin Angus Mackay21-Nov-06 4:29

Colin Angus Mackay

21-Nov-06 4:29

Dayekh wrote:
sSql = sSql & " WHERE inProjectID = " & iProjectID & " AND inStageID = " & iStageID

What is it with people injecting crap into their SQL Strings? This way lies SQL Injection Attacks!

Please, please, please will people learn about how to secure their database from attack: SQL Injection Attacks and Tips on How to Prevent Them[^]

*** Developer Day 4 in Reading, England on 2nd December 2006 - Registration Now Open ***

Upcoming Scottish Developers events:
* Developer Day Scotland: are you interested in speaking or attending?

My: Website | Blog | Photos

Dayekh21-Nov-06 4:55

21-Nov-06 4:55

Thanks for informing me of this Big Grin | :-D

.
As you have realised, I am quite new to SQL Confused | :confused:

.
It was quite interesting to read about the Injection Attacks OMG | :OMG:

.
But be wary mate, there will always be people who are unaware of this Poke tongue | ;-P

Thanks again. I will see how I can change it. D'Oh! | :doh:

Colin Angus Mackay21-Nov-06 6:25

Colin Angus Mackay

21-Nov-06 6:25

Dayekh wrote:
But be wary mate, there will always be people who are unaware of this

The number of people that were unaware seemed to be going down for a while and in the last few days there has been a spate of people that have really compromisable code.

I'll just have to keep up the fight to ensure that as many people understand what a SQL Injection Attack is and how to write better code.

coolestCoder21-Nov-06 20:00

coolestCoder

21-Nov-06 20:00

Hi,

First of all, write a store procedure that will contain all the queries in your view. If you want to check some condition
you can do it in a stored procedure too. (iProjectID and iStageID). You will have to learn the sql syntax of IF statements.
The values which i told you in last sentence, will be passed as input parameters to the stored procedure. This can be done
as told by other poster, using the command object and setting its CommandType property to StoredProcedure. Then add the
parameters to be passed to the stored procedure.

One of the things you might be wondering about, how to return multiple rows from a stored procedure. If you just
execute the query from SP and fill dataset using data-adapter, then you will get data tables for all your queries in the dataset.

"A good programmer is someone who looks both ways before crossing a one-way street." -- Doug Linder

coolestCoder

Dayekh21-Nov-06 22:44

21-Nov-06 22:44

Thank you mate! I didn't realise SPs can be so flexible. I will surely have a crack at that.

Also, to the fight against injection attacks.. Keep up the good work! Big Grin | :-D

ed^nrgc21-Nov-06 3:37

21-Nov-06 3:37

create your command the same way, then set it's CommandType as System.Data.CommandType.StoredProcedure.

Add the parameters to the command's Parameters using .Add();

then do an ExecuteReader().

Dayekh21-Nov-06 5:45

Regular Expression Validator

21-Nov-06 5:45

I'm still not done here by the way.. feel free to read my question Big Grin | :-D

dhatchu21-Nov-06 2:19

dhatchu

21-Nov-06 2:19

hai every one

i need a coding for textbox which allows only 30 characters including white space and it should block special characters.

thank u

Dhatchinamoorthy.R
9894824838

Re: Regular Expression Validator

Paddy Boyd21-Nov-06 2:26

Paddy Boyd

21-Nov-06 2:26

Which special characters?

Re: Regular Expression Validator

ayeleteric21-Nov-06 2:41

ayeleteric

21-Nov-06 2:41

\w{30}
This will answer 30 characters (A-Z,a-z,0-9)

for more details http://regexlib.com/default.aspx[^]

Eric H.

Resuable code in webforms & webservice

Nitin198121-Nov-06 1:44

Nitin1981

21-Nov-06 1:44

Hi I'm developing an application wherein I'm calling some classes in webforms which do some searching,addition etc on the database. Now what I need to know is how can I code the classes in such a way that if I need to call these classes through web service I won't have to redo the code.

Thanks

Don't Quit

Re: Resuable code in webforms & webservice

ed^nrgc21-Nov-06 2:17

Re: Resuable code in webforms & webservice

21-Nov-06 2:17

Encapsulate the functionality in a class, then use that class in any project. You can add the class to the GAC or simply use xcopy.

Nitin198122-Nov-06 18:06

Nitin1981

22-Nov-06 18:06

Hi, Firstly thanks for replying. I'm already aware of these things what I'm asking is can a single class serve both webservice & web form. As in a web service syntax is little different like [WebMethod] attribute etc.

Regards

Don't Quit

how to check email

kumar bharat bhusanam21-Nov-06 1:31

kumar bharat bhusanam

21-Nov-06 1:31

I have hosted a site and they have given 5 email id to put my mail. how can i check that mail from my application. can i assess these mails from my application. plz. provide some tips.

Bharat Bhusanam

Re: how to check email

Nitin198121-Nov-06 1:39

Nitin1981

21-Nov-06 1:39

Hi, Check this url out. http://www.systemwebmail.com/[^]

Warm Regards

Don't Quit

Current Page in GridView

Mazdak21-Nov-06 1:26

Mazdak

21-Nov-06 1:26

Dear Friends:
In numeric style of page number in GridView , how can I set the font-color or back-color of current page number?

Mazy

"One who dives deep gets the pearls,the burning desire for realization brings the goal nearer." - Babuji

ed^nrgc21-Nov-06 2:15

21-Nov-06 2:15

Have you checked the PagerStyle and PagerSettings properties?

Mazdak21-Nov-06 2:57

Mazdak

21-Nov-06 2:57

Yes, they apply on all of the fonts in footer , and do not specify current page number.

ed^nrgc21-Nov-06 3:22

21-Nov-06 3:22

As a workaround, Try to use the following to access that label:

The Current Page is called CurrentPageLabel. Assign it a class in the aspx, or try this:

GridViewRow pagerRow = CustomersGridView.BottomPagerRow;
Label pageLabel = (Label)pagerRow.Cells[0].FindControl("CurrentPageLabel");

Once you have the label, you can assign it a css class.