I am using parameterized select queries in conjunction with my program and as a whole, it works except when I try to join tables.
Here is a small excerpt what I have done:
using (MySqlCommand cmd = new MySqlCommand(paramQuery.ToSql(), connection)) {
/*
paramQuery.ToSql() equals:
"Select tableOne.ID, tableOne.Department, tableTwo.Name
From tableOne, tableTwo
Where tableOne.ID = @param0"
*/
for (int index = 0; index < paramQuery.Parameters().Count; index++)
cmd.Parameters.AddWithValue(paramQuery.Parameters().ElementAt(index).Key,
paramQuery.Parameters().ElementAt(index).Value);
/*
paramQuery.Parameters().ElementAt(index).Key = "@param0"
paramQuery.Parameters().ElementAt(index).Value = "tableTwo.ID"
*/
MySqlDataReader reader = cmd.ExecuteReader();
while (reader.Read()) {
// Do stuff
}
}
One of the tables that I am try to join will retrieve everyone in tableTwo with the same ID for all. Is there something that I am doing wrong here?