Formatting TextBox Data

[obrienkev]

Hi,

I have a multiline TextBox. Text contained in the TextBox will be stored in a SQL Server Database.
How do I format the textBox correctly for database entry?
e.g. How do I ensure that new lines will be added, etc?

Thanks.

[kenobewan]

Please explain your problem and platform clearly. Thanks.

[Plater]

Aside from watching out for single quotes, you should be fine?
(replace each instance of a single quote with two single quotes)

[TRScheel]

Aside from watching out for single quotes, you should be fine?
(replace each instance of a single quote with two single quotes)

And watch for sql injections

[Frinavale]

Hi,

I have a multiline TextBox. Text contained in the TextBox will be stored in a SQL Server Database.
How do I format the textBox correctly for database entry?
e.g. How do I ensure that new lines will be added, etc?

Thanks.

You have to screen the text in the TextBox.
You'll have to grab it and filter it to make sure that it is formatted the way that your database expects (eg. is less than the max length). It is also Strongly advised that you screen for malicious database commands that may be executed while running database queries at later dates. You should look for "Drop Table", "Delete", "Select", "Truncate"..... .

[obrienkev]

sorry, the database data is actually displayed in a dataGridView

tried this...

Eval(queryTextDataGridViewTextBoxColumn).ToString().Replace(System.Environment .NewLine, "<br />"); 
 

But VS2005 gives this error...

The name 'Eval' does not exist in the current context 
 

[Plater]

Eval is not a function in C#, it might be in VB, what language are you using?

[Frinavale]

Eval is not a function in C#, it might be in VB, what language are you using?

I've never seen it in VB either.
Maybe its a custom function?

[Plater]

Eval(queryTextDataGridViewTextBoxColumn).ToString().Replace(System.Environment .NewLine, "<br />"); 
 

Best I can tell Eval() is used in other languages to take a string and do operations on it, like Eval("1+2") would give you 3. Not sure what he is attempting to do there with it?

If you want the text from a field, get to the correct Cell (DataGridViewCe ll) and use it's .Value property. So like

string celltextwithbr=mycell.Value.ToString().Replace(System.Environment .NewLine, "<br />"); 
 

[Frinavale]

Best I can tell Eval() is used in other languages to take a string and do operations on it, like Eval("1+2") would give you 3. Not sure what he is attempting to do there with it?

If you want the text from a field, get to the correct Cell (DataGridViewCe ll) and use it's .Value property. So like

string celltextwithbr=mycell.Value.ToString().Replace(System.Environment .NewLine, "<br />"); 
 

Yeah JavaScript has an Eval() function that does precisely that.