a mistake with the "Like" statement..help!..

[Blue_Boy]

string strSQL = "select FilmName from films where FilmName like '" + cmbContent.Text + "*'";

---

I Love SQL

[Eddie Y Chen]

You should use parameterized SQL commands to prevent SQL injections...:)

[keremburak]

I tried,but it doesnt work.I wrote the whole code below.maybe it helps what I want to do. private DataView Get_DataAlphabetic() { string constr = "Provider=Microsoft.JET.OLEDB.4.0;Data Source=" + Environment.CurrentDirectory + "\\mdb\\film_db.mdb"; OleDbConnection con_ole = new OleDbConnection(constr); string strSQL = "select FilmName from films where FilmName like " + "'" + cmbContent.Text + "*'"; OleDbDataAdapter da = new OleDbDataAdapter(strSQL, con_ole); DataTable dt = new DataTable(); da.Fill(dt); DataView dv = new DataView(dt); dv.Sort = "FilmName ASC"; da.Dispose(); con_ole.Close(); return dv; } I send it to a datagrid's datasource property in another method as I use cmobobox's SelectedIndexChanged method.Hope it is clear.I wait for your replies -- modified at 5:58 Monday 10th September, 2007

a

[PIEBALDconsult]

zmskerem wrote:

"*'";

Try a percent sign (%).

[rohitsrivastava]

hi friend you are right there is mistake in sql please correct it right string strSQL = "select FilmName from films where FilmName like '" & cmbContent.Text & "%'" ; wrong this is your "select FilmName from films where FilmName like" + "'" + cmbContent.Text + "*'";

[Blue_Boy]

Database is Access, not SQL and condition % always return null value. Instead of % is used *

---

I Love SQL

[Blue_Boy]

rohitsrivastava wrote:

right string strSQL = "select FilmName from films where FilmName like '" & cmbContent.Text & "%'" ;

false _________________

rohitsrivastava wrote:

wrong this is your "select FilmName from films where FilmName like" + "'" + cmbContent.Text + "*'";

true

---

I Love SQL

[Blue_Boy]

Why you aren't trying to use Filter instead of getting directrly from database. Download all data at first time from database then use filter property.

---

I Love SQL

[DerekFL]

Use "%" instead of "*"

[keremburak]

thanks buddy maybe sometimes you must look at it in a true point.I have done it. Thnx.

a

[Blue_Boy]

You are welcome...

---

I Love SQL