Hey I did that Ben and it works fine. Just had to change the GamesPlayed 
field as I had it as a text feild and only 150 char. So it hosed on the 
submit. I changed it to memo and it worked. Thanks a bunch. It is good to 
learn the best and proper way now so I won't have bad habits later. Now I 
jsut have to finish the rest of the logic on this page. Thanks a lot and 
have a great weekend.


Have a nice day.
----- Original Message ----- 
From: "Ben Miller" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, January 13, 2005 12:46 PM
Subject: Re: [AspNetAnyQuestionIsOk] Form wil not submit. amazing


>
> Just as a precaution.
>
> I would not concatenate strings together into one statement, due to the 
> possibilities of SQL injection.  I would use parameters.
>
> strSQLstring = "INSERT INTO tblBTC ([Name], [Playingname], [Password],
> [Location], [Email], [Age], [icq], [aim], [Occupation], [bio],
> [PersonalInformation], [GamesPlayed], [Connect], [Processor], [Ram],
> [VideoCard], [SoundCard], [HardDrive], [AdditionalSystemInformation],
> [Photo], [UserName], [DateJoined], [OS], [SystemPhoto])VALUES(@Name, 
> @Playingname, @Password, @Location, @Email, @Age, @Icq, @Aim, @Occupation, 
> @Bio, @PersonalInformation, @GamesPlayed, @Connect, @Processor, @Ram, 
> @Videocard, @Soundcard, @Harddrive, @Additionalsysteminformation, @Photo, 
> @UserName, @DateJoined, @OS, @SystemPhoto)"
>
> Dim sqlcmd as OleDbCommand = new OleDbCommand(strSQLstring, objConn)
>
> sqlcmd.Parameters.Add("@Name", OleDbType.VarChar).Value = strName
> sqlcmd.Parameters.Add("@Playingame", OleDbType.VarChar).Value = 
> strPlayingname
> sqlcmd.Parameters.Add("@Password", OleDbType.VarChar).Value = strPassword
> sqlcmd.Parameters.Add("@Location", OleDbType.VarChar).Value = strLocation
> sqlcmd.Parameters.Add("@Email", OleDbType.VarChar).Value = strEmail
> sqlcmd.Parameters.Add("@Age", OleDbType.VarChar).Value = strAge
> sqlcmd.Parameters.Add("@Icq", OleDbType.VarChar).Value = strIcq
> sqlcmd.Parameters.Add("@Aim", OleDbType.VarChar).Value = strAim
> sqlcmd.Parameters.Add("@Occupation", OleDbType.VarChar).Value = 
> strOccupation
> sqlcmd.Parameters.Add("@Bio", OleDbType.VarChar).Value = strBio
> sqlcmd.Parameters.Add("@PersonalInformation", OleDbType.VarChar).Value = 
> strPersonalInformation
> sqlcmd.Parameters.Add("@GamesPlayed", OleDbType.VarChar).Value = 
> strGamesPlayed
> sqlcmd.Parameters.Add("@Connect", OleDbType.VarChar).Value = strConnect
> sqlcmd.Parameters.Add("@Processor", OleDbType.VarChar).Value = 
> strProcessor
> sqlcmd.Parameters.Add("@Ram", OleDbType.VarChar).Value = strRam
> sqlcmd.Parameters.Add("@VideoCard", OleDbType.VarChar).Value = 
> strVideoCard
> sqlcmd.Parameters.Add("@SoundCard", OleDbType.VarChar).Value = 
> strSoundCard
> sqlcmd.Parameters.Add("@HardDrive", OleDbType.VarChar).Value = 
> strHardDrive
> sqlcmd.Parameters.Add("@Additionalsysteminformation", 
> OleDbType.VarChar).Value = strAdditionalsysteminformation
> sqlcmd.Parameters.Add("@Photo", OleDbType.VarChar).Value = strPhoto
> sqlcmd.Parameters.Add("@UserName", OleDbType.VarChar).Value = strUserName
> sqlcmd.Parameters.Add("@DateJoined", OleDbType.VarChar).Value = 
> strDateJoined
> sqlcmd.Parameters.Add("@OS", OleDbType.VarChar).Value = strOS
> sqlcmd.Parameters.Add("@SystemPhoto", OleDbType.VarChar).Value = 
> strSystemPhoto
>
> objConn.Open()
> sqlcmd.ExecuteNonQuery()
> objConn.Close()
>
>
> HTH.
> Ben Miller
>
>
>
>  ----- Original Message ----- 
>  From: [EMAIL PROTECTED]
>  To: [email protected]
>  Sent: Wednesday, January 12, 2005 7:31 PM
>  Subject: Re: [AspNetAnyQuestionIsOk] Form wil not submit. amazing
>
>
>  It is using command builder to to that.
>  Dim objCommandBuilder As New OleDbCommandBuilder(objDataAdapter)
>
>  I have a hunch as I have read hours on the net using google to find this
>  that it might be about reserved Keywords. There is a field named Password
>  and a Field named Connect in the table row. I am building a insert string
>  and using [ and ] around those fields. I guess the command builder 
> doesn't
>  do that on it's own. Here is the string how does it look?
>
>
>
>  'Build SQL String --------------------------------------
>
>  Dim strSQLstring As String
>
>  'strSQLstring = "SELECT * FROM tblBTC"
>
>  strSQLstring = "INSERT INTO tblBTC ([Name], [Playingname], [Password],
>  [Location], [Email], [Age], [icq], [aim], [Occupation], [bio],
>  [PersonalInformation], [GamesPlayed], [Connect], [Processor], [Ram],
>  [VideoCard], [SoundCard], [HardDrive], [AdditionalSystemInformation],
>  [Photo], [UserName], [DateJoined], [OS], [SystemPhoto])VALUES('" & 
> strName &
>  "','" & strPlayingname & "','" & strPassword & "','" & strLocation & 
> "','" &
>  strEmail & "','" & strAge & "','" & strIcq & "','" & strAim & "','" &
>  strOccupation & "','" & strBio & "','" & strPersonalInformation & "','" &
>  strGamesPlayed & "','" & strConnect & "','" & strProcessor & "','" & 
> strRam
>  & "','" & strVideocard & "','" & strSoundcard & "','" & strHarddrive & 
> "','"
>  & strAdditionalsysteminformation & "','" & strPhoto & "','" & strUserName 
> &
>  "','" & strDateJoined & "','" & strOS & "','" & strSystemPhoto & "')"
>
>  '-------------------------------------------------------
>
>
>
>  Have a nice day.
>  ----- Original Message ----- 
>  From: "Dean Fiala" <[EMAIL PROTECTED]>
>  To: <[email protected]>
>  Sent: Wednesday, January 12, 2005 8:57 PM
>  Subject: Re: [AspNetAnyQuestionIsOk] Form wil not submit. amazing
>
>
>  >
>  > Let's see the insert statement...
>  > -- 
>  > Dean Fiala
>  > Very Practical Software, Inc
>  > http://www.vpsw.com
>  >
>  >
>  >
>  > Yahoo! Groups Links
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>
>
>
>
> ------------------------------------------------------------------------------
>  Yahoo! Groups Links
>
>    a.. To visit your group on the web, go to:
>    http://groups.yahoo.com/group/AspNetAnyQuestionIsOk/
>
>    b.. To unsubscribe from this group, send an email to:
>    [EMAIL PROTECTED]
>
>    c.. Your use of Yahoo! Groups is subject to the Yahoo! Terms of 
> Service.
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
>
> Yahoo! Groups Links
>
>
>
>
>
>
>
> 




 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/AspNetAnyQuestionIsOk/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 



Reply via email to