Determine if user input is equivalent to value from MySQL database column from C# Input

Question

I have this C# gui application that take user inputs, id name total_items the inputs value will be inserted into MySQL database on column cust_ID cust_name cust_total_items

void Button2Click(object sender, EventArgs e)
{
    try {
        con = new MySqlConnection("server=localhost;database=csharp_database;username=root;password=nfreal-yt10;");
        con.Open();
        
        MySqlCommand sql_cmd = null;
        
        int id = Convert.ToInt32(textBox1.Text);
        String name = textBox2.Text;
        int total_items = Convert.ToInt32(textBox3.Text);
        
        String cmdString = "INSERT INTO main VALUES ('"+ id + "','" + name + "','" + total_items + "');";
        sql_cmd = new MySqlCommand(cmdString,con);
        
        sql_cmd.ExecuteNonQuery();
        
        if(id == cust_ID) {
            MessageBox.Show("ID Already exists");
           }
        
        if(sql_cmd != null) {
            MessageBox.Show("Inserted Successfully");
        }
        
        con.Close();
    } catch (Exception ef) {
        Console.WriteLine(ef);
    }
}

I want to make it that when the new user entered an ID that is equivalent to the already existing ID from cust_ID column value to not insert the input ID into MySQL database and return a messagebox that display "ID Already exists". How do I implement this?, I have done couple of googling yet no solution.

I advise against having users input their own primary key value. The database can and normally should handle that for you. — Crowcoder
– Crowcoder, Commented Jul 6, 2022 at 11:56
please use parameterised queries - building SQL queries by concatenation etc. is a recipe for disaster. not only is it a source for many hard to debug syntax errors, it's also a wide, open gate for SQL Injection attacks. — Franz Gleichmann
– Franz Gleichmann, Commented Jul 6, 2022 at 11:59

Willow · Accepted Answer · 2022-07-06 12:09:50Z

1

Change cmdString:

"IF EXISTS (SELECT * FROM main WHERE id =" + id + " RETURN -1 ELSE INSERT ..."

answered Jul 6, 2022 at 12:09

Willow

591 silver badge9 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Pythonic User Over a year ago

Ok so I ended up with: "IF EXISTS (SELECT * FROM main WHERE cust_ID =" + id + " RETURN -1 ELSE INSERT INTO main VALUES ('"+ id + "','" + name + "','" + total_items + "'));"; the thing is how do I make it so that the error messagebox to displays if the Id already exists?

Crowcoder Over a year ago

Does RETURN work/do anything in MySql outside of a procedure or function?

Willow Over a year ago

@PythonicUser if sql returns -1 display that user exists. executenonquery catches return values.

Collectives™ on Stack Overflow

Determine if user input is equivalent to value from MySQL database column from C# Input

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related