How to make a query string with entity framework

Question

I have a complex query which can grow or get smaller depending on which paramaters it receives. Example:

public string CreateQuery(string[]  fields)
{
    var query = "SELECT student_name,student_last_name FROM students";

    if(fields[0]!= "")
    {
        query += " WHERE studient_id='"+fields[0]+"'";
    }

    if(fields[1] != null)
    {
        //them....
    }
    //and so on

    return query;
}

So i need to execute that query like webmatrix

ViewBag.StudentInf = db.Query("Query string here...");

How, then, can I execute a query string with entity Framework??

Community · Accepted Answer · 2017-05-23 11:43:17Z

1

You really should not be doing this. Your running a very big risk of someone performing a SQL injection attack on you.

You can do something like recommended in this answer.

But if you really want to do it you can do the following:

using (System.Data.Common.DbCommand cmd = db.Database.Connection.CreateCommand())
{
    cmd.CommandText = "SELECT *...";
}

edited May 23, 2017 at 11:43

CommunityBot

11 silver badge

answered Apr 10, 2013 at 15:56

pingoo

2,06414 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Rui Jarimba · Accepted Answer · 2013-04-10 17:59:54Z

1

For .NET Framework version 4 and above: use ObjectContext.ExecuteStoreCommand()

A tutorial here

Or try this function

static void ExecuteSql(ObjectContext c, string sql)
{
    var entityConnection = (System.Data.EntityClient.EntityConnection)c.Connection;
    DbConnection conn = entityConnection.StoreConnection;    
    ConnectionState initialState = conn.State;

    try
    {
        if (initialState != ConnectionState.Open)
            conn.Open();  

        using (DbCommand cmd = conn.CreateCommand())
        {
            cmd.CommandText = sql;
            cmd.ExecuteNonQuery();
        }
    }
    finally
    {
        if (initialState != ConnectionState.Open)
            conn.Close(); 
    }
}

edited Apr 10, 2013 at 17:59

Rui Jarimba

18.5k11 gold badges64 silver badges101 bronze badges

answered Apr 10, 2013 at 15:54

KF2

10.2k8 gold badges46 silver badges77 bronze badges

Comments

tschmit · Accepted Answer · 2013-04-10 16:08:05Z

0

if your question is about building a dynamic query with Linq to Entities you can, at least, use Dynamic Linq.

answered Apr 10, 2013 at 16:08

tschmit

7,8402 gold badges38 silver badges45 bronze badges

Collectives™ on Stack Overflow

How to make a query string with entity framework

3 Answers 3

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related