I’m working with C# and SQL Sever 2008, when I try to create a command for searching a record I got exception that said “Invalid Column name”
this is my code :
void cari()
{
koneksi.Open();
DataTable dt = new DataTable();
SqlDataAdapter SDA = new SqlDataAdapter("SELECT * FROM jadwalkuliah where Subject = "+ textBox1.Text, koneksi);
SDA.Fill(dt);
koneksi.Close();
dataGridView1.DataSource = dt;
}`
the search command should be work as search engine, can anyone help me?
You haven’t quoted the value of subject:
koneksi);
Or for a contains search:
SqlDataAdapter SDA = new SqlDataAdapter(“SELECT * FROM jadwalkuliah where Subject = ‘%”+ textBox1.Text + “%'”, koneksi);
You shouldn’t build queries this way. It is susceptible to SQL injection attacks.