how to fix Server Error in '/' Application Error??

Hi guys,

i am trying to populate my database with detals i enter in my webform to save into the database but i receive this error :

Server Error in '/' Application.

Incorrect syntax near the keyword 'Order'.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

This is my code:

protected void Button1_Click1(object sender, EventArgs e)

{

//Creating a connection to my database using the connection string

string cs = System.Configuration.ConfigurationManager.ConnectionStrings["RegistrationConnectionString"].ConnectionString;

SqlConnection con = new SqlConnection(cs);

//preparing a query which will insert the data entered in the textboxes to the database

SqlCommand cmd = new SqlCommand("INSERT INTO Order(OrderDate, CustomerID, LidNo, StickerNo, LJarNo, SJarNo) values('" + this.txtDate.Text + "' ,'" + this.txtId.Text + "','" + this.txtLids.Text + "','" + this.txtStickers.Text + "','" + this.txtLargeJars.Text + "','" + this.txtSmallJars.Text + "')", con);

con.Open();

cmd.ExecuteNonQuery();

con.Close();

Response.Redirect("Orders.aspx");

}

and my database looks like this:

any help is greatly appriciated!

i got it guys thank you very much!

I just have one problem left, its outputting onto a webform but it wont let me add an extra column for the last small Jar column.

this is the error i am getting:

this is my code:

(!Page.IsPostBack)

{

SqlConnection con = new SqlConnection();

con.ConnectionString = ConfigurationManager.ConnectionStrings["RegistrationConnectionString"].ToString();

con.Open();

SqlCommand cmd = new SqlCommand();

cmd.CommandText = "Select * from [OrderDetails]";

cmd.Connection = con;

SqlDataReader rd = cmd.ExecuteReader();

table.Append("");

table.Append("

");

table.Append("

");

if (rd.HasRows)

{

while (rd.Read())

{

table.Append("

");

table.Append("

");

table.Append("

");

table.Append("

");

table.Append("

");

table.Append("

");

table.Append("

");

table.Append("

");

table.Append("

");

}

table.Append("

PlaceHolder1.Controls.Add(new Literal { Text = table.ToString() });

rd.Close();

and this is how it look:

any help is welcomed !! thank you

Nitin Sontakke8y ago

Also, as Laxmidhar mentioned, always store a result in a string variable and then use that variable for query execution.

The biggest benefit it you can 'see' the value. You can also 'copy' and 'paste' the value in SSMS and see if it works there or gives any errors.

Nitin Sontakke8y ago

Changing a table name is a good move. I was going to suggest that but wasn't aware where else you will have to make changes.

Why not put the whole of that in a try...catch...finally block? Which will catch the exception and show the error if any.

What makes you believe that data is not inserted? Did you query the table in SQL Server Management Studio?

Also make sure you use date format yyyy-MM-dd as mentioned in my previous reply.

Carol Cashman8y ago

Thank you for your help guys!

i have tried all suggestions, and i had to change the table name to OrderDetails and it got rid of the error.

But now I have no errors and the data is still not saving to the database.

in text:

//Creating a connection to my database using the connection string

string cs = System.Configuration.ConfigurationManager.ConnectionStrings["RegistrationConnectionString"].ConnectionString;

SqlConnection con = new SqlConnection(cs);

//preparing a query which will insert the data entered in the textboxes to the database

SqlCommand cmd = new SqlCommand("INSERT INTO OrderDetails(OrderDate, CustomerID, LidNo, StickerNo, LJarNo, SJarNo) values( '"

+ Convert.ToDateTime(this.txtDate.Text).ToString("MM/dd/yyyy") + "' ," +

(this.txtId.Text == "" ? 0 : Convert.ToInt32(this.txtId.Text)) +

", " + (this.txtLids.Text == "" ? 0 : Convert.ToInt32(this.txtLids.Text)) + " , " +

(this.txtStickers.Text == "" ? 0 : Convert.ToInt32(this.txtStickers.Text)) + " , " +

(this.txtLargeJars.Text == "" ? 0 : Convert.ToInt32(this.txtLargeJars.Text)) + " , " +

(this.txtSmallJars.Text == "" ? 0 : Convert.ToInt32(this.txtSmallJars.Text)) + " )", con);

con.Open();

cmd.ExecuteNonQuery();

con.Close();

Response.Redirect("Orders.aspx");

it just goes straight the the Orders.aspx webform with the dispalyed databse table with no information added.

Any help is welcomed !

Nitin Sontakke8y ago

I still don't see that the table name is used as [dbo].[Order] in your script as suggested by Suraj Kumar. Please use it exactly as it is shown in your screen shot.

Also make sure that you are passing date as yyyy-MM-dd (2017-12-20).

Suraj Kumar8y ago

You are getting error because you have used table name Order which is a reserved keyword of sql server. So use [] for table name. Date format should be MM/dd/yyyy in textbox and not blank.

I have attached the command text as below

SqlCommand cmd = new SqlCommand("INSERT INTO [Order](OrderDate, CustomerID, LidNo, StickerNo, LJarNo, SJarNo) values( '" + Convert.ToDateTime(this.txtDate.Text).ToString("MM/dd/yyyy") + "' ," + (this.txtId.Text == "" ? 0 : Convert.ToInt32(this.txtId.Text)) + ", " + (this.txtLids.Text == "" ? 0 : Convert.ToInt32(this.txtLids.Text)) + " , " + (this.txtStickers.Text == "" ? 0 : Convert.ToInt32(this.txtStickers.Text)) + " , " + (this.txtLargeJars.Text == "" ? 0 : Convert.ToInt32(this.txtLargeJars.Text)) + " , " + (this.txtSmallJars.Text == "" ? 0 : Convert.ToInt32(this.txtSmallJars.Text)) + " )", con);

Laxmidhar Sahoo8y ago

sir another thing you should pass int value in all the fileds except date field

Laxmidhar Sahoo8y ago

sir all of your fields are int type except one date field.

So only one field closed with single code others not

String query = "INSERT INTO Order(OrderDate, CustomerID, LidNo, StickerNo, LJarNo, SJarNo) values('" + this.txtDate.Text + "' ," + this.txtId.Text + "," + this.txtLids.Text + "," + this.txtStickers.Text + "," + this.txtLargeJars.Text + "," + this.txtSmallJars.Text + ')";

SqlCommand cmd = new SqlCommand(query,con);

Carol Cashman8y ago

@Laxmihar Sahoo

the same error is coming up as before

Laxmidhar Sahoo8y ago

sir the below statement take in a string variable and pass the string variable in the constructor of command class

String query = "INSERT INTO Order(OrderDate, CustomerID, LidNo, StickerNo, LJarNo, SJarNo) values('" + this.txtDate.Text + "' ,'" + this.txtId.Text + "','" + this.txtLids.Text + "','" + this.txtStickers.Text + "','" + this.txtLargeJars.Text + "','" + this.txtSmallJars.Text + "')";

SqlCommand cmd = new SqlCommand(query,con);

Now Take the break point in the string variable .so can find the error easily

Order ID	Order Date	Customer ID	Amount of Lids	Amount of Stickers	Amount of Large Jars	Amount of Small Jars
" + rd[0] + "	" + rd[1] + "	" + rd[2] + "	" + rd[3] + "	" + rd[5] + "	" + rd[6] + "	" + rd[7] + "