My 2 cents: you should never prepend with % or + in LIKE statement, it turns off indexes. It could hurt performance if you have lots of entries. ----- You seem eager to impose your preference of preventing others from imposing their preferences on others. -- Red Stateler, Master of Circular Reasoning and other fallacies If atheism is a religion, then not collecting stamps is a hobby. -- Unknown God is the only being who, to rule, does not need to exist. -- Charles Baudelaire

thnx alot it worked

Pete is correct in saying that this is dangerous code. You have to use strong protection to make sure that crimewithdate.text2 does not contain any malicious SQL code instead of the expected search parameter. To answer your question as asked, here is one solution: string q = string.Format("SELECT collapsed_building.b_name, collapsed_building.b_desc FROM collapsed_building WHERE collapsed_building.b_name LIKE '%{0}%'", crimewithdate.text2); (The line breaks are for readability only) Do realize that an evil user could enter something like; x'; TRUNCATE TABLE collapsed_building; SELECT * FROM collapsed_building WHERE b_name LIKE 'x and wreck your whole day. It is much better to pass crimewithdate.text2 as a parameter and not expose your database to bad people. modified on Tuesday, January 22, 2008 11:26:49 AM

Do not use the word urgent. It is considered rude and is frowned upon here. You are best off asking in the SQL forum on this site or the C# forum. Don't do both or you will get flamed for cross posting :-D "The clue train passed his station without stopping." - John Simmons / outlaw programmer

Hi, I worked in Web application but I think both are the same. The procedure which I did in Web Applications is: 1) First in the ASPX Page gave the required Text boxes which will give input to Stored Porcs. Upon submitting the Page I will redirect to new ASPX Page which will Display only Crystal Reports. This is because if we keep any other fields like Textboxes there will be a problem which I don't know exactly. 2) In the Second Page I will just have Crystal Reports Viewer(CRViewerPortfolioReports) and Crystal Reports Source(CRSourcePortfolioReports;). On Page Load the below code has to be written int Portfolio_ID = int.Parse(Request.QueryString.Get("Portfolio_ID")); //Portfolio_ID Input Parameter for Stored Procedure. string ReportName = "CRPortfolioReports.rpt"; string ReportPath; ReportPath = Server.MapPath("../CrystalReportFiles/") + ReportName; //ReportPath Location of the CRYSTAL REPORT CRSourcePortfolioReports.ReportDocument.Load(ReportPath); CRSourcePortfolioReports.ReportDocument.SetDatabaseLogon(USERNAME, PASSWORD); CRSourcePortfolioReports.ReportDocument.SetParameterValue("@IMRsPerPortfolio_PortfolioID", Portfolio_ID); //@IMRsPerPortfolio_PortfolioID STORED PROCEDURE INPUT PARAMETER //IF you want to add another Input Parameter DATE... //CRSourcePortfolioReports.ReportDocument.SetParameterValue("@IMRsPerPortfolio_DATE", //DATE); CRViewerPortfolioReports.ReportSource = CRSourcePortfolioReports; CRViewerPortfolioReports.DataBind(); 3) Building the CRYSTAL REPORT .rtp FILE Add New Crystal Report File and create a new Database connection and add the Stored Procedure developed. You will automatically get the Input Parameters and Output Parameters which you could automatically map to X or Y Cordinates. Like if @IMRsPerPortfolio_PortfolioID id INPUT Parameter it will be coming in Parameters Field of Field Explorer Tab.

JOIN the tables in your database query. Paul Marfleet "No, his mind is not for rent To any God or government" Tom Sawyer - Rush

Just wrote one line instead of two... then, you will get the all records from both tables. mavii wrote: da.Fill(ds, "bothtable"); Thanks and Regards, Michael Sync ( Blog: http://michaelsync.net) "Please vote to let me (and others) know if this answer helped you or not. A 5 vote tells people that your question has been answered successfully and that I've pitched it at just the right level. Thanks."

Pete O`Hanlon wrote: I would have thought that he'd want to make things as secure as possible beforehand. Indeed. Unless, of course, he's in league with certain elements..... :~ Upcoming FREE developer events: * Glasgow: SQL Server Managed Objects AND Reporting Services ... My website

session is hide the data. that is what I called "secure". no matter encrypted or no, user still cannot deal with the value directly. session can store any datatype including datasource. thanks for sharing:) Regards, Riza Azmi Simple thing should be simple, complex thing should be possible

string strQuery = ""; openFileDialog1.ShowDialog(); string s = openFileDialog1.FileName; textBox6.Text = s; st2 = s; string st = "Pict" + Guid.NewGuid().ToString() + ".jpg"; File.Copy(openFileDialog1.FileName, Path.Combine(@"c:\inetpub\wwwroot\15 website\images", st)); strQuery = "INSERT INTO criminal(pic_name) VALUES('"+System.IO.Path.GetFileName(openFileDialog1.FileName)+"')"; SqlCommand com = new SqlCommand(strQuery, conn); com.ExecuteNonQuery(); PROBLEM: error comes on this the SQL Query , am i inserting rightly? or there is some other way Actually i want to insert only picture name of the picture to be browsed can u plz suggest any solution

can u suggest a solution for following problem public static int count = 0; private void button3_Click_1(object sender, EventArgs e) { openFileDialog1.ShowDialog(); string s = openFileDialog1.FileName; textBox6.Text = s; string st = "Pict" + (count++) + ".jpg"; File.Copy(s.Substring(13, s.Length - 13), "C:\\Inetpub\\wwwroot\\15 WebSite\\images\\" + st);} i want the image to be saved in local host with the same name as as it was present in hard drive (from where it was browsed) ur solution regarding BLOB must be right but i cant apply it right now:(

This error message generally comes up when Applications’ exe is already running and then user try to rebuild the project. Please check if there is already an exe running from following location: bin\Debug\rescue15.exe If yes, then please stop this exe and then try rebuilding again. Best Regards, Sam Xavier www.componentone.com

thank you this is really working, can u suggest the solution for one more problem string strQuery = ""; openFileDialog1.ShowDialog(); string s = openFileDialog1.FileName; textBox6.Text = s; string st = "Pict" + Guid.NewGuid().ToString() + ".jpg"; File.Copy(openFileDialog1.FileName, Path.Combine(@"c:\inetpub\wwwroot\15 website\images", st)); strQuery = "INSERT INTO criminal(pic_name) VALUES(System.IO.Path.GetFileName(openFileDialog1.FileName))"; PROBLEM: error comes on this the SQL Query , am i inserting rightly?

You need to use virtual path only you can not user physical path in ASP.Net applications I mean you can but it will then find the file to clients hard drive. Paras Kaneriya The difference between genius and stupidity is that genius has its limits.

you can use the following query... string str = "Select cr_name, substring(cr_pic,4,len(cr_pic)-4) from criminal" “The woods are lovely, dark and deep. But I have promises to keep, and miles to go before I sleep.”

If your ASP.NET app can see the file, then it must be within the web application. Sending c:\inetpub\MyApp\images\cgraus.jpg means nothing to the client. \images\cgraus/jpg will work fine, it's a path from the web root. Christian Graus - Microsoft MVP - C++ "I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )

If you have some way of determining the time (or sequence) the rows were inserted in the table (e.g. a date stamp column, of an incremental sequence number or id) then this is quite easy. SELECT TOP 5 * FROM MyTable ORDER BY TimeStamp DESC Upcoming events: * Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ... "I wouldn't say boo to a goose. I'm not a coward, I just realise that it would be largely pointless." My website

if using sqlserver or access just select top 5 * from..... order by ID if using mysql use: select * from ... order by ID limit 5 assuming you have an ID autoincrement column (actually it's always better to explicitly state the cilumns you want rather than use * ....)

mavii wrote: how pictures are stored in a table column put them in a varbinary(max) column. Upcoming events: * Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ... "I wouldn't say boo to a goose. I'm not a coward, I just realise that it would be largely pointless." My website

Add a new column to your datagrid. Then in the UI you can click the button that says change to template column. when you do this, it will create an item template. Or you can just directly in the html have code like this: Hope that helps. Ben