C# and Access Query

[Chris]

New to C# and can't quite figure out how to write my
update query correctly...(this is actually ASP.NET using
C# trying to work with Access - wasn't sure where to post)

UPDATE customer SET last_name = "" + txtLast_Name.Text
+ "";

Access needs quotes around it's strings. I can't figure
out how to do it.

I've tried this:
UPDATE customer SET last_name = "" + txtLast_Name.Text
+ """;

and this:
UPDATE customer SET last_name = "/" + txtLast_Name.Text
+ "/"";

none work...

Thanks!

[John Mark Howell]

Not sure where you are putting this command but for an example, when
building a string, you can simply insert the tick mark.
Examples:
String s = "Update customer SET last_name = '" + myvariable + "'";
or even better:
String s = String.Format("Update customer SET last_name = '{0}'",
myvariable);

HTH....
"Chris" <an*******@discussions.microsoft.com> wrote in message
news:1c*****************************@phx.gbl...

New to C# and can't quite figure out how to write my
update query correctly...(this is actually ASP.NET using
C# trying to work with Access - wasn't sure where to post)

UPDATE customer SET last_name = "" + txtLast_Name.Text
+ "";

Access needs quotes around it's strings. I can't figure
out how to do it.

I've tried this:
UPDATE customer SET last_name = "" + txtLast_Name.Text
+ """;

and this:
UPDATE customer SET last_name = "/" + txtLast_Name.Text
+ "/"";

none work...

Thanks!

[Jon Skeet [C# MVP]]

Chris <an*******@discussions.microsoft.com> wrote:

New to C# and can't quite figure out how to write my
update query correctly...(this is actually ASP.NET using
C# trying to work with Access - wasn't sure where to post)

UPDATE customer SET last_name = "" + txtLast_Name.Text
+ "";

Access needs quotes around it's strings. I can't figure
out how to do it.

You don't - you use parameters instead. That way you don't have to do
any quoting, and you don't risk a SQL injection attack.

See http://www.pobox.com/~skeet/csharp/faq/#db.parameters

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Patrick]

Shameless plug:

I recently included in my blog text for using the Queries built in Access with an ODBC connection. I couldn't find any really useful resource for this, so I built one that works for me:

http://www.thespoke.net/MyBlog/Capta...nk/MyBlog.aspx

"unknown" wrote:

Community Message Not Available