New to ASP.NET need help

[thatraja]

From link[^]:

Basically, when you failed to connect to your SQL Server, the issue could be: 1) Network issue, 2) SQL Server configuration issue. 3) Firewall issue, 4) Client driver issue, 5) Application configuration issue. 6) Authentication and logon issue.

Check these Steps to troubleshoot SQL connectivity issues[^] SQL Server 2005 Connectivity Issue Troubleshoot - Part I[^] Troubleshoot Connectivity Issue in SQL Server 2005 - Part II[^] Troubleshoot Connectivity Issue in SQL Server 2005 - Part III[^]

thatraja

Code converters | Education Needed | Improve EverythingNew

[Hari CodeBlogger]

nope. i just resolved that but got an syntax error in particular line "int temp = Convert.ToInt32(com.ExecuteScalar().ToString());" code SqlConnection cn = new SqlConnection(ConfigurationManager.ConnectionStrings["userConnectionString"].ConnectionString); cn.Open(); string sel = "select count(*) from Table where username = '" + username.Text + "'"; SqlCommand com = new SqlCommand(sel, cn); int temp = Convert.ToInt32(com.ExecuteScalar().ToString()); if(temp==1) { Response.Write("User already exists..!!"); } cn.Close();

[Lost User]

oh! great..(y) :)

[Hari CodeBlogger]

I got an error An exception of type 'System.Data.SqlClient.SqlException' occurred in System.Data.dll but was not handled in user code view details ---> {"Incorrect syntax near the keyword 'Table'."} code: SqlConnection cn = new SqlConnection(ConfigurationManager.ConnectionStrings["userConnectionString"].Con‌​nectionString); cn.Open(); string sel = "select count(*) from Table where username = '" + username.Text + "'"; SqlCommand com = new SqlCommand(sel, cn); int temp = Convert.ToInt32(com.ExecuteScalar().ToString()); if(temp==1) { Response.Write("User already exists..!!"); }cn.Close();

[Lost User]

One thing I would like to mention Hari is seldom use select * from .... always have a habit to write all the column names. Its a very good practice.:) I guess use the name propertyfor the textbox from where you need the name and then write the name in the "--" that might work out. and from the error it seems you miss some Dll's assemblies.. please check using a debugger where exactly you are getting that exception. thanks

[Hari CodeBlogger]

thanx (y)

[Chris Quinn]

Table is a reserved word in SQL, so it is a bad idea to call a table "Table" - call it something significant, like Registration or UserReg In MSSQl, if you are using a reserved word for something else, such as a table or column name, you must surround it with square brackets e.g. SELECT * from [TABLE] ......

========================================================= I'm an optoholic - my glass is always half full of vodka. =========================================================

[Hari CodeBlogger]

worked.. thanx. (y)

[Richard Deeming]

Your code is susceptible to SQL Injection[^]. For example, if the user types Robert';DROP TABLE [Table];-- in the username textbox, your query becomes:

select count(*) from Table where username = 'Robert';DROP TABLE [Table];--'

That's actually two queries; one to select the number of records with the username "Robert", and one to delete the entire table. The "--" at the end comments out the rest of the query. It's quite easy to fix:

// SqlConnection implements IDisposable, so wrap it in a "using" block:
using (SqlConnection cn = new SqlConnection(ConfigurationManager.ConnectionStrings["userConnectionString"].ConnectionString))
{
cn.Open();

// Use a parameterized query to avoid SQL injection:
string sel = "select count(\*) from \[Table\] where username = @username";

// SqlCommand also implements IDisposable:
using (SqlCommand com = new SqlCommand(sel, cn))
{
    // Add the parameter to the command:
    com.Parameters.AddWithValue("@username", username.Text);
    
    int temp = Convert.ToInt32(com.ExecuteScalar());
    if (temp == 1)
    {
        Response.Write("User already exists..!!");
    }
}

}

---

"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

[Hari CodeBlogger]

thanx. :)