ado.net

It represents a SQL Server command or stored procedure.

The CommandText property should be set to the actual text of the command or the name of the stored procedure.

The CommandType property specifies the type of command.

The Connection property should be set to the SqlConnection object being used.

To prevent SQL injection, you can use named parameters in your command by adding to the Parameters collection.

Finally, you can invoke one of the following methods to invoke your command:

ExecuteReader() returns a SqlDataReader which you can use to read the rows returned by a SELECT query etc.

ExecuteNonQuery() executes an INSERT,UPDATE or DELETE statement and returns the number of rows affected.

ExecuteScalar() returns a single result such as a COUNT, MIN, MAX, AVG or SUM.

2 Replies

Know the answer? Post it — somebody with the same question will find it here.