Comments by Member 12905345 (Top 24 by date)

"Server=.\SQLEXPRESS;database =NEWCMO; integrated security=True; "

About the SQLi but I already remove the String in Query.

So I need to remove the codes that can cause SQLi..
those columns are on the datagridview, and what i want is when everytime I search in in search bar for example "Dela Cruz" , all rows with the "Dela Cruz" will appear the those row have not will hide.
Can you please show me how to use the textbox to be search engine and the datagridview will show the result of search?

those columns are on the datagridview, and what i want is when everytime I search in in search bar for example "Dela Cruz" , all rows with the "Dela Cruz" will appear the those row have not will hide.

How could I code if only specific columns? like
in tblPayment I will get the column patientID, billingID, Surname,Firstname, Age, Balance
And in tblTreatment only the Remarks and Complain?

I really sorry if I demand too much but thanks for consideration.

CREATE TABLE [dbo].[tblTreatment] (
[treatmentID] INT IDENTITY (1, 1) NOT NULL,

[Remarks] NVARCHAR (2000) NULL,
[Complain] NVARCHAR (2000) NULL,
CONSTRAINT [PK_tblTreatment] PRIMARY KEY CLUSTERED ([treatmentID] ASC)
);

CREATE TABLE [dbo].[tblPayment] (
[patientID] INT NULL,
[billingID] INT IDENTITY (1, 1) NOT NULL,
[treatmentID] INT NULL,
[Surname] NVARCHAR (50) NULL,
[Firstname] NVARCHAR (50) NULL,
[Age] INT NULL,
[Total Amount to be Paid] FLOAT (53) NULL,
[Discount] NVARCHAR (50) NULL,
[Discounted Amount] FLOAT (53) NULL,
[Type of Payment] NVARCHAR (MAX) NULL,
[Payment] FLOAT (53) NULL,
[Balance] FLOAT (53) NULL,
[Change] FLOAT (53) NULL,
CONSTRAINT [PK_tblPayment] PRIMARY KEY CLUSTERED ([billingID] ASC)
);

Im going to use the datagridview to view the specific columns from tables and filter it everytime I search a data while these columns are concatenated.. But I dont know why primary key or foreign key is important??

So, it gonna be...

Dim searchQuery As String = "SELECT * FROM tblTreatment WHERE CONCAT(CONCAT(patientID,Surname,Firstname,Age,...etc..),CONCAT(Clm34,Clm35,Clm36,Clm37,Clm38,Clm41,Clm42))

Am I correct if Im going to apply in my actual program?

How could I concatenate the halfs??

I already change into character but it gives me a same problem

But when I unchecked the Null of Picture, it has an error saying
'PatientInfo' table
- Unable to modify table.
ALTER TABLE only allows columns to be added that can contain nulls, or have a DEFAULT definition specified, or the column being added is an identity or timestamp column, or alternatively if none of the previous conditions are satisfied the table must be empty to allow addition of this column. Column 'Picture' cannot be added to non-empty table 'PatientInfo' because it does not satisfy these conditions.

When I put the "DELETE FROM PatientInfo WHERE [Patient ID]=@PID"
An error occurs saying "Must declare the scalar variable "@PID"
and another error saying "Not allowed to change the "ConnectionString". The Connection's current state is open"

How could I do that sir?

hi.. I tried it over ans over again the procedure that you suggested.. By the way. I also have a separated installed sql server 2012. But I think, shoul I uninstalled the sql server 2012 and installed a SQL Server Express????? Thanks

I didnt find if the value of UserID could get and use it in if else condition

I am using a vb. net