vb.net insert query

Question

Please help me determine what's wrong with my code, the query seems to be fine, I tried executing it on phpmyadmin.

  Dim cmdString As OdbcCommand
        cmdString = New OdbcCommand("INSERT INTO info_student (`idno`, `Last Name`, `First Name`, `Year and Section`, `Birthday`, `Address`) VALUES('" & (TextBox6.Text) & "','" & (TextBox1.Text) & "','" & (TextBox2.Text) & "','" & (TextBox3.Text) & "','" & (TextBox8.Text) & "','" & (TextBox10.Text) & "','" & (TextBox4.Text) & "'", con)
        cmdString.ExecuteNonQuery()

I got this error:

ERROR [42000] [MySQL][ODBC 5.1 Driver][mysqld-5.1.36-community-log]You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

Joe Stefanelli · Accepted Answer · 2011-02-22 14:06:21Z

1

You're missing the closing parens at the end of the insert statement.

                                                    V
...& (TextBox10.Text) & "','" & (TextBox4.Text) & "')", con)...
                                                    ^

answered Feb 22, 2011 at 14:06

Joe Stefanelli

136k21 gold badges243 silver badges241 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Rhapsody · Accepted Answer · 2011-02-22 14:04:58Z

1

I think that one of the values you're trying to insert already contains a single quote (') and therefore the SQL statement becomes invalid.

Please read some articles about SQL Injection, your code is vulnerable!

answered Feb 22, 2011 at 14:04

Rhapsody

6,0772 gold badges33 silver badges49 bronze badges

Comments

Matt · Accepted Answer · 2011-02-22 14:05:15Z

1

Try changing your quotes to ' rather than the tilted quote character

answered Feb 22, 2011 at 14:05

Matt

2,0983 gold badges27 silver badges40 bronze badges

Collectives™ on Stack Overflow

vb.net insert query

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related