Stored Procedure using ASP.Net

That you should tell me Vijaya........

You are welcome Randheer Singh

20Miles/hour is ok ;)

Hahaha, I will slow down Vijaya.:-)

Niradhip, you are very fast..not giving any chance to post answers :)

Thanks -- Vijaya Kadiyala

www.DotNetVJ.com

For sql injection you can refer the following URL:

1.http://forums.asp.net/t/1362351.aspx

2.http://dotnet.dzone.com/news/aspnet-preventing-sql-injectio

Hi

When you are implementing like this keep in mind about "SQL Injection" attack.

Thanks -- Vijaya Kadiyala

www.DotNetVJ.com

Say your store procedure will accept two input parameter.
and you want to pass textbox value to store procedure.Please check the following code
my store procedure name is SPR_GetBoothdetails

SqlCommand sqlComm;
string strConnectionString = ConfigurationManager.AppSettings["ConnectionString"];
sqlConn = new SqlConnection(strConnectionString);
string strvalu1 =txtValu1.Text;
string strvalu2 =txtValu2.Text;

sqlComm = new SqlCommand("SPR_GetBoothdetails", sqlConn);
sqlComm.CommandType = CommandType.StoredProcedure;
sqlComm.Parameters.Add(new SqlParameter("@str_valu1",strvalu1));
sqlComm.Parameters.Add(new SqlParameter("@str_valu2", strvalu2));

Check out the below link

http://www.macronimous.com/resources/calling_stored_procedures_from_ASP.NET_and_VB.NET.asp

Thanks -- Vijaya Kadiyala

www.DotNetVJ.com