Question

Is there a way to use DateTimePicker as your searching device for ListView?

I don’t know how to use DateTimePicker as my search engine…

HERE IS THE CODES FOR MY SEARCH:

Dim conn As SqlConnection
Dim cmd As SqlCommand
Dim da As SqlDataAdapter
Dim ds As DataSet
Dim itemcoll(100) As String

Me.ListView1.View = View.Details
Me.ListView1.GridLines = True
ListView1.Items.Clear()

conn = New SqlConnection("Data Source=#####;Initial Catalog=#####;Persist Security Info=True;User ID=#####;Password=#####")
Dim strQ As String = String.Empty
strQ = "SELECT ControlNo,EmpNo,CheckOutDate,CheckOutTime,TaxiNo,PlateNo,Model,Make FROM dbo.ChkInOut WHERE ControlNo ='" + txtsearch.Text + "'"

cmd = New SqlCommand(strQ, conn)
da = New SqlDataAdapter(cmd)
ds = New DataSet
da.Fill(ds, "Table")
Dim i As Integer = 0
Dim j As Integer = 0
For i = 0 To ds.Tables(0).Rows.Count - 1
    For j = 0 To ds.Tables(0).Columns.Count - 1
        itemcoll(j) = ds.Tables(0).Rows(i)(j).ToString()
    Next
    Dim lvi As New ListViewItem(itemcoll)
    Me.ListView1.Items.Add(lvi)
 Next

Answer 1

There are few problems with your code as is, so let’s take them one at a time

1. SqlCommand inherits from DbCommand, which implements the IDisposable interface.

   The primary use of this interface is to release unmanaged resources.

   The best way do that is with the Using keyword. For a code example of that, take a look at the sample code at the bottom of this page.

   Same goes for SqlConnection, wrap it in a Using statement.

2. Don’t concatenate strings together to make SQL queries, this opens your application up to SQL Injection attacks. There are examples of how to create parameterized queries here and here (unfortunately I didn’t see a good example on MSDN).

   In your case, the query will look like this:

   strQ = "SELECT ControlNo, ..<rest of columns>.. ,Model,Make " & _
          "FROM dbo.ChkInOut " & _
          "WHERE ControlNo = @controlNo"
   
   cmd = New SqlCommand(strQ, conn)
   cmd.Parameters.AddWidthValue("@controlNo", txtsearch.Text);
   
         ... rest of code here ...
   

3. To query by a user specified date, you need to first get the date from the DateTimePicker.Value property. Then construct a query (like in the example above) and pass a parameter with the selected date. You may find this question abou SQL Server dates helpful.