I have a drop down list which has the values of column's table.
and I have the following statement in c#:
string raf = string.Format("select Id from Customer WHERE email="dropdownlist1");
how can assign the value of the drop down list to email ?
-
make sure you use parametersprospector– prospector2015-01-10 07:37:31 +00:00Commented Jan 10, 2015 at 7:37
Add a comment
|
2 Answers
You need to use .SelectedValue property to fetch the value of dropdown:-
string raf = string.Format("select Id from Customer WHERE email={0}",
dropdownlist1.SelectedValue);
For fetching dropdown text:-
string raf = string.Format("select Id from Customer WHERE email={0}",
dropdownlist1.SelectedItem.Text);
Also, Note you need a place holder like {0}, when using String.Format.
Though as per your query, you are mostly hitting a database, so beware of SQL Injection, use parameterized query like this:-
string raf = select Id from Customer WHERE email=@DropdownText;
SqlCommand cmd = new SqlCommand(raf,conn);
cmd.Parameters.Add("@DropdownText",SqlDbType.NVarchar,20).Value =
dropdownlist1.SelectedItem.Text;
8 Comments
Tien Dinh
The above solution is open to SQL injection attack. The proper way is to use sql parameter
Rahul Singh
@TienDinh - Yeah OP didn't mentioned that he is going to hit DB but as per his statement I should have considered that and BTW was updating that only when you commented. Thanks.
Refaat Kh
how can i display the value of the selected Id into a label ?
Rahul Singh
@RefaatKh - Simple:
LabelId.Text = dropdownlist1.SelectedItem.Text;Refaat Kh
no, i mean the "id" where the value = dropdownlist.
|
try this
string raf = string.Format("select Id from Customer
WHERE email='{0}'",dropdownlist1.SelectedValue));
{0} Means Your are fetching First Argument of string.Format method
Beware of SQL Injection Always Use SQL Parameters
1 Comment
Rahul Singh
You don't need
ToString(), SelectedValue property returns String.