Putting A second WHERE condition

Question

4.00/5 (1 vote)

See more:

SQL-Server-2008R2

SQL

string strUpdate = "Update CreateDocket set BranchCode = '" + strBranchCode + "', Date = '" + strDate + "', PinCode = '" + strPinCode + "', [To] = '" + strTo + "', ConrCode = '" + strConrCode + "', Consignee = '" + strConsignee + "', PKTS = '" + strPKTS + "',ActWt = '" + strActWt + "',ChargeWt = '" + strChargeWt + "', GrandTotal = '" + strGrandTotal + "', GoodsType = '" + strGoodsType + "', CODamount = '" + strCODamount + "', Basis = '" + strBasis + "', Mode = '" + strMode + "',ChallanNo = '" + strChallanNo + "',VehicleNo = '" + strVehicleNo + "',ChallanDate = '" + strChallanDate + "',Description = '" + strDescription + "', RChallanDate = '" + strRChallanDate + "', FromHub='" + strFromHub + "', ToHub='" + strToHub + "', Remarks='" + strRemarks + "' , Received2 = 'True' WHERE DocketNo ='" + strDocketNo + "'";
 strSql.Append(strUpdate);

I want to one more where condition i.e. WHERE FromSTN =@Branch".tell me how to do this

Posted 13-Apr-15 19:19pm

Member 11111143

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Abhinav S · Answer 1 · 2015-04-13T19:41:00

Solution 1

You need to use an AND clause[^] for this requirement.

It is always a good idea to use command parameters[^] rather than directly using variables in your query.

Posted 13-Apr-15 19:41pm

Abhinav S

Suvendu Shekhar Giri · Answer 2 · 2015-04-13T19:49:00

Note: use parameterized query/ stored procedure instead of inline query to avoid SQL Injection.

Just add with AND at the last like

C#

WHERE DocketNo ='" + strDocketNo + "' AND FromSTN =@Branch";

Now your code snippet should look like

C#

string strUpdate = "Update CreateDocket set BranchCode = '" + strBranchCode + "', Date = '" + strDate + "', PinCode = '" + strPinCode + "', [To] = '" + strTo + "', ConrCode = '" + strConrCode + "', Consignee = '" + strConsignee + "', PKTS = '" + strPKTS + "',ActWt = '" + strActWt + "',ChargeWt = '" + strChargeWt + "', GrandTotal = '" + strGrandTotal + "', GoodsType = '" + strGoodsType + "', CODamount = '" + strCODamount + "', Basis = '" + strBasis + "', Mode = '" + strMode + "',ChallanNo = '" + strChallanNo + "',VehicleNo = '" + strVehicleNo + "',ChallanDate = '" + strChallanDate + "',Description = '" + strDescription + "', RChallanDate = '" + strRChallanDate + "', FromHub='" + strFromHub + "', ToHub='" + strToHub + "', Remarks='" + strRemarks + "' , Received2 = 'True' WHERE DocketNo ='" + strDocketNo + "'  AND FromSTN =@Branch";
strSql.Append(strUpdate);

then add value to the parameter

C#

//add parameter to your command object
command.Parameters.Add(new SqlParameter("Branch", YourValue)); //provide value here

In case this doesn't help, please let me know :)