inserting listbox item into databse

[Kunal P]

hi i just wanted help to insert a single listbox item into the databse. lb.Text = ListBox1.SelectedValue.ToString(); cmd2.CommandText = "Insert into Bill(BillNo,PatID,Test) Values('" + maxlbl.Text + "','" + patid.Text + "','" +lb.Text+ "' "; now, wat should be correct statement to set the label text of the listitem that is currently selected.

Kunal

[Not Active]

First, you should be using stored procedures. If you can't then at least use a SqlCommand and SqlParameters. Second, never allow unvalidated text to be inserted into your command or database.

---

only two letters away from being an asset

[Kunal P]

i know its bad programming practice, and very much prone to sql injection... but just a mini project thing.. for some hit and trial..

Kunal

[Not Active]

All the more reason to practice more correct techniques. When the deadline is near you will code what is quick and spend hours debugging and fixing afterward.

---

only two letters away from being an asset

[Kunal P]

hmm.. thats a point.. should go for the best possible practices.. cmd.Parameters.Add(); @list now how do i pass the listbox item value into this..

Kunal