C#

public static class Util
{
        public static void AddParameters(SqlCommand cmd, params object[] args)
        { 
            for (int i = 0; i < args.Length; i += 2)
            {
                cmd.Parameters.Add(GetParameter((string)args[i], args[i + 1]));
            }
        }

        public SqlParameter GetParameter(string name, object value)
        {
            SqlParameter p = new SqlParameter();
            p.ParameterName = name;
            p.SqlDbType = GetDbType(value);
            p.Direction = ParameterDirection.Input;
            p.Value = value;
            return p;
        }

        public SqlDbType GetDbType(object value)
        {
            if (value == null) throw new ArgumentNullException();

            if (t == typeof(int)) return SqlDbType.Int;
            if (t == typeof(string)) return SqlDbType.NVarChar;
            if (t == typeof(DateTime)) return SqlDbType.DateTime;
            if (t == typeof(Boolean)) return SqlDbType.Bit;
            if (t == typeof(byte[])) return SqlDbType.Image;
            if (t == typeof(SqlBinary)) return SqlDbType.Binary;
            if (t == typeof(Guid)) return SqlDbType.UniqueIdentifier;
            if (t == typeof(Int64)) return SqlDbType.BigInt;
            // ...

            throw new NotSupportedException("Missing support for type " + t.FullName + ".");
        }
}

SqlCommand getInsertCommand(string col1, int col2)
{
    SqlCommand cmd = new SqlCommand("INSERT [Table] VALUES (@col1, @col2);");
    Util.AddParameters(cmd, 
       "@col1", col1, 
       "@col2", col2);
    return cmd;
}

SqlCommand cmd = new SqlCommand("INSERT INTO EACS_User_1 " +
                                "(firstName, lastName) " +
                                "VALUES " +
                                "(" + uf_FirstName + "," + uf_LastName + ")");

SqlCommand cmd = new SqlCommand("INSERT INTO EACS_User_1 " +
                                "(firstName, lastName) " +
                                "VALUES " +
                                "(@FN, @LN)");
cmd.Parameters.AddWithValue("@FN", uf_FirstName);
cmd.Parameters.AddWithValue("@LN", uf_LastName);

<<thashif>> wrote:

Actually i only find cmd.parameters.add i mean i dont get addwithvalue... should i include anything??? is it because i am using VS2003

cmd.Parameters.Add("@FN", System.Data.SqlDbType.VarChar).Value = uf_LastName;

for (int i = 0; i < dataGridView1.Rows.Count; i++)
              {
                  dataGridView1.BackgroundColor = Color.Red;
                  if (i % 2 == 0)
                  {
                      dataGridView1.BackgroundColor = Color.Blue;
                  }
              }

private void dataGridView1_CellFormatting(object sender, DataGridViewCellFormattingEventArgs e)
     {
         for (int i = 0; i < dataGridView1.Columns.Count; i++)
         {
             e.CellStyle.BackColor = Color.Red;
             if (i % 2 == 0)
             {
                 e.CellStyle.BackColor = Color.Blue;
             }
         }
     }