Help: Insert record into database

[david]

I have following code, but I do not know where the problem is. Thank you for
any help.

David

----Code---
'connection
conn = New SqlConnection _
("data source=localhos t;integrated security=true;i nitial
catalog=DemoCRQ database")
'command
Dim propertyCMD As New SqlCommand("INE RT INTO " &
txtProperty.Tex t & "(Code, Name) VALUES(" & txtCode.Text & ", " &
txtName.Text & ")", conn)
'command type: CommandType.Tex t
propertyCMD.Com mandType = CommandType.Tex t
'Open connection and execute the insert statement
conn.Open()
propertyCMD.Exe cuteNonQuery()
conn.Close()

----
----error message-----
Incorrect syntax near the keyword 'INTO'.
Description: An unhandled exception occurred during the execution of the
current web request. Please review the stack trace for more information about
the error and where it originated in the code.

Exception Details: System.Data.Sql Client.SqlExcep tion: Incorrect syntax near
the keyword 'INTO'.

Source Error:
Line 66: propertyCMD.Com mandType = CommandType.Tex t
Line 67: 'Open connection and execute the insert statement
Line 68: conn.Open()
Line 69: propertyCMD.Exe cuteNonQuery()
Line 70: conn.Close()
Source File: c:\inetpub\wwwr oot\Demo\AddCla ssProperty.aspx .vb Line: 68

[Claus Konrad]

INERT is spelled INSERT.

Do use stored procedues over direct queries.
The presented code is really open to injection attacks!

--
rgds.
/Claus Konrad
"david" wrote:

I have following code, but I do not know where the problem is. Thank you for
any help.

David

----Code---
'connection
conn = New SqlConnection _
("data source=localhos t;integrated security=true;i nitial
catalog=DemoCRQ database")
'command
Dim propertyCMD As New SqlCommand("INE RT INTO " &
txtProperty.Tex t & "(Code, Name) VALUES(" & txtCode.Text & ", " &
txtName.Text & ")", conn)
'command type: CommandType.Tex t
propertyCMD.Com mandType = CommandType.Tex t
'Open connection and execute the insert statement
conn.Open()
propertyCMD.Exe cuteNonQuery()
conn.Close()

----
----error message-----
Incorrect syntax near the keyword 'INTO'.
Description: An unhandled exception occurred during the execution of the
current web request. Please review the stack trace for more information about
the error and where it originated in the code.

Exception Details: System.Data.Sql Client.SqlExcep tion: Incorrect syntax near
the keyword 'INTO'.

Source Error:
Line 66: propertyCMD.Com mandType = CommandType.Tex t
Line 67: 'Open connection and execute the insert statement
Line 68: conn.Open()
Line 69: propertyCMD.Exe cuteNonQuery()
Line 70: conn.Close()
Source File: c:\inetpub\wwwr oot\Demo\AddCla ssProperty.aspx .vb Line: 68

[Mark Rae]

"david" <da***@discussi ons.microsoft.c omwrote in message
news:FB******** *************** ***********@mic rosoft.com...

Dim propertyCMD As New SqlCommand("INE RT INTO " &

Well, at the risk of appearing patronising, if you change "INERT" to
"INSERT", it might work... ;-)

[david]

Thank you both of you. Misspelling made me crazy.

David

"david" wrote:

I have following code, but I do not know where the problem is. Thank you for
any help.

David

----Code---
'connection
conn = New SqlConnection _
("data source=localhos t;integrated security=true;i nitial
catalog=DemoCRQ database")
'command
Dim propertyCMD As New SqlCommand("INE RT INTO " &
txtProperty.Tex t & "(Code, Name) VALUES(" & txtCode.Text & ", " &
txtName.Text & ")", conn)
'command type: CommandType.Tex t
propertyCMD.Com mandType = CommandType.Tex t
'Open connection and execute the insert statement
conn.Open()
propertyCMD.Exe cuteNonQuery()
conn.Close()

----
----error message-----
Incorrect syntax near the keyword 'INTO'.
Description: An unhandled exception occurred during the execution of the
current web request. Please review the stack trace for more information about
the error and where it originated in the code.

Exception Details: System.Data.Sql Client.SqlExcep tion: Incorrect syntax near
the keyword 'INTO'.

Source Error:
Line 66: propertyCMD.Com mandType = CommandType.Tex t
Line 67: 'Open connection and execute the insert statement
Line 68: conn.Open()
Line 69: propertyCMD.Exe cuteNonQuery()
Line 70: conn.Close()
Source File: c:\inetpub\wwwr oot\Demo\AddCla ssProperty.aspx .vb Line: 68