SqlConnection myConnection;
//----------------------------------------------------------------------------------------------------
private void Page_Load(object sender, System.EventArgs e)
{
myConnection = new SqlConnection("server=(local);uid=sa;p wd=yaali;database=MDB");
if (!IsPostBack) BindGrid();
}
//----------------------------------------------------------------------------------------------------
public void BindGrid()
{
myConnection = new SqlConnection("server=(local);uid=sa;p wd=yaali;database=MDB");
SqlDataAdapter myCommand = new SqlDataAdapter("SELECT * FROM" +
" tblSupplies", myConnection);
DataSet ds = new DataSet();
myCommand.Fill(ds);
MyDataGrid.DataSource=ds;
MyDataGrid.DataBind();
}
//----------------------------------------------------------------------------------------------------
private void AddAuthor_Click(object sender, System.EventArgs e)
{
if (name.Value == "" || Model.Value == "" ||
DeviceType.Value == "" || EnterDate.Value == "")
{
Message.InnerHtml = "ERROR: Null values not allowed for" +
" tblSupplies ID, Name or DeviceType";
Message.Style["color"] = "red";
BindGrid();
return;
}
SqlConnection myConnection = new SqlConnection("server=(local);uid=sa;p wd=yaali;database=MDB");
String insertCmd = "insert into tblSupplies values (name," +
" ,model,DeviceType,GetType,EnterDate,FixRecord,Pric e,Force,Location,Answerable)";
SqlCommand myCommand = new SqlCommand(insertCmd, myConnection);
myCommand.Parameters.Add(new SqlParameter("@name",
SqlDbType.NChar, 30));
myCommand.Parameters["@name"].Value = name.Value;
myCommand.Parameters.Add(new SqlParameter("@Model",
SqlDbType.NChar, 10));
myCommand.Parameters["@Model"].Value = Model.Value;
myCommand.Parameters.Add(new SqlParameter("@DeviceType",
SqlDbType.NChar, 10));
myCommand.Parameters["@DeviceType"].Value = DeviceType.Value;
myCommand.Parameters.Add(new SqlParameter("@GetType",
SqlDbType.NChar, 10));
myCommand.Parameters["@GetType"].Value = GetType1.Value;
myCommand.Parameters.Add(new SqlParameter("@EnterDate",
SqlDbType.NChar, 10));
myCommand.Parameters["@EnterDate"].Value = EnterDate.Value;
myCommand.Parameters.Add(new SqlParameter("@FixRecord",
SqlDbType.NVarChar, 50));
myCommand.Parameters["@FixRecord"].Value = FixRecord.Value;
myCommand.Parameters.Add(new SqlParameter("@Price",
SqlDbType.BigInt, 8));
myCommand.Parameters["@Price"].Value = Price.Value;
myCommand.Parameters.Add(new SqlParameter("@Force",
SqlDbType.TinyInt,1));
myCommand.Parameters["@Force"].Value = Force.Value;
myCommand.Parameters.Add(new SqlParameter("@Location",
SqlDbType.NChar,10));
myCommand.Parameters["@Location"].Value = Location.Value;
myCommand.Parameters.Add(new SqlParameter("@Answerable",
SqlDbType.NChar,10));
myCommand.Parameters["@Answerable"].Value =Answerable.Value;
myCommand.Connection.Open();
myCommand.ExecuteNonQuery();
/*try
{
myCommand.ExecuteNonQuery();
Message.InnerHtml = "<b>Record Added</b><br>" + insertCmd;
}
catch (SqlException e)
{
if (e.Number == 2627)
Message.InnerHtml = "ERROR: A record already exists with" +
" the same primary key";
else
Message.InnerHtml = "ERROR: Could not add record, please " +
" ensure the fields are correctly filled out";
Message.Style["color"] = "red";
}*/
myCommand.Connection.Close();
BindGrid();
}
The name 'name' is not permitted in this context. Only constants, expressions, or variables allowed here. Column names are not permitted.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Data.SqlClient.SqlException: The name 'name' is not permitted in this context. Only constants, expressions, or variables allowed here. Column names are not permitted.
Source Error:
Line 83:
Line 84: myCommand.Connection.Open();
Line 85: myCommand.ExecuteNonQuery();
Line
