How to write SQL Query in next line in asp.net C#

Question

1.00/5 (2 votes)

See more:

Hi friends,

How to write Insert query in next line.
I have lot of fields in my database.

This is my code...it shows error

sqlcommand cmd = new sqlcommand("INSERT into UserInfo VALUES('" + TxtUserName.Text + "','" + TxtPassword.Text + "','" + TxtFirstName.Text + "','" + TxtLastName.Text + "')",con);

Please help thanks

Posted 14-May-14 1:49am

Member239258

Add a Solution

Comments

[no name] 14-May-14 7:52am

We can't see your screen to know what error this is showing to you.

Vi(ky 14-May-14 8:17am

update your question . Specify the error

Member239258 14-May-14 8:22am

I want to write Sql Query in Multiple line.

Please help.

Thanks

[no name] 14-May-14 8:22am

You need to specify the fields you want to insert your data into and you also need to use a parameterized query.

CHill60 14-May-14 9:28am

Is the error "The type or namespace name 'sqlcommand' could not be found (are you missing a using directive or an assembly reference?)"?

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

CHill60 · Answer 1 · 2014-05-14T04:12:00

The first error you will get is on sqlcommand and that error will be

Quote:
The type or namespace name 'sqlcommand' could not be found (are you missing a using directive or an assembly reference?)"

That's because it should be SqlCommand - C# is a case-sensitive language. There's a discussion on why that might be on this link[^]

Next you will (eventually) get problems because you are concatenating textbox contents to build your sql string. You should use Parameterized Queries - this link gives some reasons why[^]
Next possible issue is prompted by your comment

Member239258 said:
I have lot of fields in my database.

If your table UserInfo has more columns than the four values you are trying to insert, then you must let SQL Server know which columns you are providing (reference[^]). The same is true when you provide values that are not in the same order that the columns were defined. E.g. in your case (I have guessed at the column names)

INSERT into UserInfo (UserName, Password, FirstName, LastName) VALUES(...

This code should work for you given the information you've provided

string sql = "INSERT into UserInfo (UserName, Password, FirstName, LastName) VALUES(@UserName,@Password,@FirstName,@LastName)";
SqlCommand cmd = new SqlCommand(sql, con);
cmd.Parameters.AddWithValue("@UserName", TxtUserName.Text);
cmd.Parameters.AddWithValue("@Password", TxtPassword.Text);
cmd.Parameters.AddWithValue("@FirstName", TxtFirstName.Text);
cmd.Parameters.AddWithValue("@LastName", TxtLastName.Text);

hitesh_tech · Answer 2 · 2014-05-14T03:02:00

Solution 1

try following.

SQL

string cmdtxt="";
cmdtxt = cmdtxt + "INSERT into UserInfo VALUES('" + TxtUserName.Text ;
cmdtxt = cmdtxt + "','" + TxtPassword.Text + "','" + TxtFirstName.Text + "','" + TxtLastName.Text ;
sqlcommand cmd = new sqlcommand(cmdtxt,con);

Posted 14-May-14 3:02am

hitesh_tech

Comments

[no name] 14-May-14 9:10am

Why should he try that? String concatenation for an SQL query? And a query that is not going to work anyway?

CHill60 14-May-14 9:36am

a. This won't compile. SqlCommand not sqlcommand for a start.
b. You should use parameterised queries. Never construct a sql query from user input by concatenating strings like this.
c. This won't work because you have missed a single-quote (parameterised queries remove that issue as well) and the final closing bracket
d. If you really are going to concatenate strings then consider using StringBuilder in the System.Text namespace