Question

I have a sql select statement in my VS2005 C# server-side coding for a web application and I am meeting some errors.

Below is a screenshot of the controls in the webpage:

---

Data Source SqlDataSource1 : Query:SELECT [Name] FROM [Users].

Dropdownlist UserNameList : Lists all userName retrieved from SqlDataSource1.

Checkboxes AdminCb and UserCb : Automatically checks if the userType of the userName is as.

Button loadUser : Gets the user type and checks the check boxes accordingly.

---

Below is my code for my loadUser button

    SqlConnection conn = new SqlConnection("Data Source=DATASOURCE");
    string sql = string.Format("SELECT [User Type] FROM [Users] where Name like " + UserNameList.Text);
    SqlCommand cmd = new SqlCommand(sql, conn);
    conn.Open();
    cmd.ExecuteNonQuery();
    conn.Close();

    if(sql== "Administrator"){
        AdminCb.Checked=true;
    }
    if(sql== "User"){
        UserCb.Checked=true;
    }

---

Currently I am stuck with the error (Wong is the 2nd word of the user’s name):

---

Questions:

1) How can change my Sql query so that it can take in more than 1word?

2) And will I be able to check boxes once I am able to run my sql query?

Thank You.

Answer 1

You must have to use Parameter and call the ExecuteScalar() method instead of ExecuteNonQuery().

 string sql = "SELECT [User Type] FROM [Users] where [Name]=@Name";
 SqlCommand cmd = new SqlCommand(sql, conn);
 cmd.Parameters.Add("@Name",SqlDbType.VarChar,50).Value=UserNameList.Text;
 conn.Open();
 Object result=cmd.ExecuteScalar();
 conn.Close();

 if(result!=null)
  {
     string usertype=result.ToString();
     if(usertype=="Administrator")
       {}
     else
       {}
  }

In case, if result returned from the database contains more then one rows then use ExecuteReader() method.

 string sql = "SELECT [User Type] FROM [Users] where [Name] like @Name";
 SqlCommand cmd = new SqlCommand(sql, conn);
 cmd.Parameters.Add("@Name",SqlDbType.VarChar,50).Value="%" + UserNameList.Text + "%";
 conn.Open();
 SqlDataReader result=cmd.ExecuteReader();
 while(result.Read())
 {
    ///
   }
 result.Close();
 conn.Close();