Hi friends .. i need help

jeeva,
That not a good way of codeing, refer link..
http://www.c-sharpcorner.com/UploadFile/puranindia/ParameterizedQuerySQLInjectionAttacks08102009011903AM/ParameterizedQuerySQLInjectionAttacks.aspx

0

jeeva16y ago

to save records in sql server try this
Try
Dim s1 As String = TextBox1.Text
Dim s2 As String = TextBox2.Text
Dim s3 As String = datetimepicker1.value
cmdstr = "insert into empl values('" & s1 & "','" & s2 & "','" & s3 & "')"
cmd = New SqlCommand(cmdstr, con)
con.Open()
cmd.ExecuteNonQuery()
MessageBox.Show("new row added successfully")
Catch ex As Exception
MessageBox.Show(ex.ToString())
Finally
con.Close()
End Try

0

Suthish Nair16y ago

refer link

0