problem with inserting from textbox to sql

Question

here is my code

SqlCommand insert_user = new SqlCommand("insert into dbo.users (username,password,firstname,lastname,address,country,city,phonenumber,gender,email) VALUES (' bader','123','beno','venp','33','pal','d',''1234','male'," + @TextBox3.Text + ");", badersql);

what i am trying is to insert from textbox3.text to my sql email column , the problem is when i try that , this error msg during debuging popups " Error 9 The name 'TextBox3' does not exist in the current context".

i tried '" + TextBox3.text + "' with @ and without , same problem

if it helps , here is all my code

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data.SqlClient;
using System.Data.Sql;

public partial class Default4 : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void Button1_Click(object sender, EventArgs e)
    {


        SqlConnection badersql = new SqlConnection("Data Source=BADER-VAIO\\SQLEXPRESS;Initial Catalog=webage;Persist Security Info=True;User ID=sa;Password=123");

        badersql.Open();
        SqlCommand insert_user = new SqlCommand("insert into dbo.users (username,password,firstname,lastname,address,country,city,phonenumber,gender,email) VALUES (' bader','123','beno','venp','33','pal','d',''1234','male'," + @TextBox3.Text + ");", badersql);

        insert_user.ExecuteNonQuery();
        //insert into webpage.dbo.users (username,password,firstname,lastname,address,country,city,phonenumber,gender,email) VALUES (' bader','123','beno','venp','33','pal','d',''1234','male','[email protected]');
        badersql.Close();


    }


    protected void RadioButton1_CheckedChanged(object sender, EventArgs e)
    {


    }
}

any suggestions ?

regards,

Oded · Accepted Answer · 2010-11-27 20:15:58Z

2

You don't have a server side control with the ID TextBox3 on your .aspx page. Did you rename it or remove it?

As an aside - this is wide open to SQL Injection attacks - you should be using parameterized queries instead of string concatenation.

answered Nov 27, 2010 at 20:15

Oded

501k102 gold badges900 silver badges1k bronze badges

Sign up to request clarification or add additional context in comments.

8 Comments

Bader Over a year ago

<asp:TextBox ID="TextBox3" runat="server"></asp:TextBox> i have it

Oded Over a year ago

@Bader - have you rebuilt your solution?

Bader Over a year ago

i am sorry i am not familiar with sql injection attacks or else i am totally noob , if u just help me with the textbox part , that will be appreciated.

Oded Over a year ago

@Bader - I think that explaining huge security holes should be part of explaining things, especially to a noob.

Bader Over a year ago

yea i know , but asp.net in general is not on my interests , i am just trying to build a small local project on computer for education reasons , so if u can help , i will be thankful

|

Tim · Accepted Answer · 2010-11-27 20:16:05Z

0

Is that a typo in your question or in your code? ''1234' ?

answered Nov 27, 2010 at 20:16

Tim

5,4213 gold badges34 silver badges42 bronze badges

Comments

Bader · Accepted Answer · 2010-12-09 18:31:55Z

0

it works , i was trying to debug the .cs page itself , thats why the erorr pop ups , thanks everyone for your help

answered Dec 9, 2010 at 18:31

Bader

2071 gold badge8 silver badges21 bronze badges

Collectives™ on Stack Overflow

problem with inserting from textbox to sql

3 Answers 3

8 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

8 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related