problem with insert command

  • Thread starter Thread starter Dan
  • Start date Start date
D

Dan

Hi,

i try to insert values into a sql server table like this (code-behind):

comm1 = Textbox1.Text
comm2=Textbox2.Text
.......

comd.CommandText = "insert into [dbo].[mytable] (field1, field2,...)
values(comm1, comm2, ....)"

i get the error:
The name "field1l" is not permitted in this context. Valid expressions are
constants, constant expressions, and (in some contexts) variables. Column
names are not permitted.

Can someone give me the right syntax?
Thanks in advance.
Dan
 
Dan said:
Hi,

i try to insert values into a sql server table like this (code-behind):

comm1 = Textbox1.Text
comm2=Textbox2.Text
......

comd.CommandText = "insert into [dbo].[mytable] (field1, field2,...)
values(comm1, comm2, ....)"

i get the error:
The name "field1l" is not permitted in this context. Valid expressions are
constants, constant expressions, and (in some contexts) variables. Column
names are not permitted.

Can someone give me the right syntax?
Thanks in advance.
Dan
Click to expand...

The database is not aware of the variables that you use in your code.

Put parameters in the query, and add the values as parameter objects to
the command object.
 
Dan said:
Hi,

i try to insert values into a sql server table like this (code-behind):

comm1 = Textbox1.Text
comm2=Textbox2.Text
......

comd.CommandText = "insert into [dbo].[mytable] (field1, field2,...)
values(comm1, comm2, ....)"

i get the error:
The name "field1l" is not permitted in this context. Valid expressions are
constants, constant expressions, and (in some contexts) variables. Column
names are not permitted.

Can someone give me the right syntax?
Thanks in advance.
Dan
Click to expand...

Your SQL statement is in quotes so the comm1, comm2 are sent as those values
to the server which has no idea what you want to do.

Use parameters to pass the values of the fields. Something like "insert
into mytable (field1,field2) values (@field1, @field2)

Then in your code create the parameters, add them to the SQLCommand and then
execute.

Hope this gets you going in the right direction.
Lloyd Sheen
 
Hi,

i try to insert values into a sql server table like this (code-behind):

comm1 = Textbox1.Text
comm2=Textbox2.Text
......

comd.CommandText = "insert into [dbo].[mytable] (field1, field2,...)
values(comm1, comm2, ....)"

i get the error:
The name "field1l" is not permitted in this context. Valid expressions are
constants, constant expressions, and (in some contexts) variables. Column
names are not permitted.

Can someone give me the right syntax?
Thanks in advance.
Dan
Click to expand...
You need to read up on parameterized queries ... then you'll know how
to safely pass user entered variables to database queries
 
Of course, thanks ..

Lloyd Sheen said:
Dan said:
Hi,

i try to insert values into a sql server table like this (code-behind):

comm1 = Textbox1.Text
comm2=Textbox2.Text
......

comd.CommandText = "insert into [dbo].[mytable] (field1, field2,...)
values(comm1, comm2, ....)"

i get the error:
The name "field1l" is not permitted in this context. Valid expressions
are constants, constant expressions, and (in some contexts) variables.
Column names are not permitted.

Can someone give me the right syntax?
Thanks in advance.
Dan
Click to expand...

Your SQL statement is in quotes so the comm1, comm2 are sent as those
values to the server which has no idea what you want to do.

Use parameters to pass the values of the fields. Something like "insert
into mytable (field1,field2) values (@field1, @field2)

Then in your code create the parameters, add them to the SQLCommand and
then execute.

Hope this gets you going in the right direction.
Lloyd Sheen
Click to expand...
 
Back
Top