ASP.Net/ADO.net Database/SqlCommand
Dynamic sql command
<source lang="csharp">
<%@ Page Language="VB" %> <script runat="server">
Function FindByTitle(ByVal search As String) As System.Data.DataSet Dim connectionString As String = "server="(local)\NetSDK"; trusted_connection=true; Database="pubs"" Dim sqlConnection As System.Data.SqlClient.SqlConnection = New System.Data.SqlClient.SqlConnection(connectionString) Dim queryString As String = "SELECT [titles].[title], [titles].[price], [titles].[notes], [titles].[pubdate] F"& _ "ROM [titles] WHERE ([titles].[title] like @search)" Dim sqlCommand As System.Data.SqlClient.SqlCommand = New System.Data.SqlClient.SqlCommand(queryString, sqlConnection) sqlCommand.Parameters.Add("@search", System.Data.SqlDbType.NVarChar).Value = search Dim dataAdapter As System.Data.SqlClient.SqlDataAdapter = New System.Data.SqlClient.SqlDataAdapter(sqlCommand) Dim dataSet As System.Data.DataSet = New System.Data.DataSet dataAdapter.Fill(dataSet) Return dataSet End Function Sub Button1_Click(sender As Object, e As EventArgs) Dim sTitle As String = TextBox1.Text DataGrid1.DataSource = FindByTitle(sTitle) DataGrid1.DataBind() End Sub
</script> <html> <head> </head> <body>
<form runat="server">
Find: <asp:TextBox id="TextBox1" runat="server"></asp:TextBox> <asp:Button id="Button1" onclick="Button1_Click" runat="server" Text="Go"></asp:Button>
<asp:DataGrid id="DataGrid1" runat="server" BorderWidth="5px" BorderColor="Olive" CellPadding="5"> <HeaderStyle font-size="X-Small" font-names="Arial Narrow" font-bold="True" forecolor="White" backcolor="Olive"></HeaderStyle> <AlternatingItemStyle backcolor="Silver"></AlternatingItemStyle> <ItemStyle font-size="X-Small" font-names="Arial Narrow"></ItemStyle> </asp:DataGrid>
</form>
</body> </html>
</source>