Operator '&' is not defined for types 'String' and 'System.Web.UI.HtmlControls.HtmlInputText'

Question

Protected Sub btnAddSubmit_Click(ByVal sender As Object, ByVal e As EventArgs) Handles btnAddSubmit.Click Dim add As String

    add = "INSERT INTO account(firstname, lastname, uname, pass, type)" & " VALUES ('" & fname.Text & "','" & lname & "','" & username & "','" & password & "','" & type & "')"

An error pops up at this part "INSERT INTO account(firstname, lastname, uname, pass, type)" & " VALUES ('" & fname.Text & "

The Error: Operator '&' is not defined for types 'String' and 'System.Web.UI.HtmlControls.HtmlInputText'.

The program that I have to create should have the ability to add an account can someone help me? :(

EDIT: I have manage to get it worked but however instead of recording the input in the textbox it shows System.Web.UI.HtmlControls.HtmlInputText in the database (instead of for example Firstname: Tom it shows Firstname: System.Web.UI.HtmlControls.HtmlInputText)

Dim SQLStatement As String = "INSERT INTO account(firstname, lastname, uname, pass, type)" & " VALUES ('" & fname.ToString() & "','" & lname.ToString() & "','" & username.ToString() & "','" & password.ToString() & "','" & type.ToString() & "')"

SaveNames(SQLStatement)

This is what I had change

Security is hard. Do not reinvent the wheel. You should use an existing, proven, authentication system, such as ASP.Net Identity. Otherwise, you will have vulnerabilities. — SLaks
– SLaks, Commented Mar 20, 2014 at 15:00
this is the fname lname <label for="firstname">First Name</label> <input runat=server id="fname" type="text" placeholder="Firstname"> — user2172157
– user2172157, Commented Mar 20, 2014 at 15:08

Community · Accepted Answer · 2017-05-23 10:26:00Z

0

As Mr Slacks says you have many problems in your single line of code above.
The lesser one is the use of Text property for an HtmlInputText control.

You should use the property Value for every HtmlInputText (fname, etc...) that you want to get its content.

For the other problems. Start reading about Sql Injection and Parameterized queries and ASP.NET Identity

EDIT Your last edit applies the ToString() method to the instance of the HtmlInputText control and results (as expected) in the fully qualified class name.

You should apply the ToString() method to the Value property

  fname.Value.ToString ...... etc....

edited May 23, 2017 at 10:26

CommunityBot

11 silver badge

answered Mar 20, 2014 at 15:03

Steve

217k22 gold badges242 silver badges296 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

user2172157 Over a year ago

That works! Thanks! Last question, how can I clear the textbox after pressing the submit button?

Steve Over a year ago

fname.Value = "" should work, but if not, please post a new question.

Collectives™ on Stack Overflow

Operator '&' is not defined for types 'String' and 'System.Web.UI.HtmlControls.HtmlInputText'

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related