C# Form OleDb Excel Update command for data in textbox and combobox
up vote
0
down vote
favorite
I have a form with textbox and combobox. I am inserting data from those two boxes into excel using OleDb insert into command
OleDbConnection connection = new OleDbConnection();
connection.ConnectionString = @"Provider=Microsoft.ACE.OLEDB.12.0;Data
Source=C:DesktopExcelBook1.xlsx;
Extended Properties='Excel 12.0 Xml; HDR = YES'";
connection.Open();
OleDbCommand command = new OleDbCommand();
command.Connection = connection;
string error = comboBox1.SelectedItem.ToString();
command.CommandText = "insert into [Sheet1$] (NAME, MARKS) values('" +
textBox1.Text + "' , '" + error + "') ";
command.ExecuteNonQuery();
MessageBox.Show("data saved");
connection.Close();
Now i need update command for updating any previous data in excel.
c# excel oledbcommand
asked Nov 21 at 11:32
Viswanathan L
128
add a comment |
up vote
0
down vote
favorite
I have a form with textbox and combobox. I am inserting data from those two boxes into excel using OleDb insert into command
OleDbConnection connection = new OleDbConnection();
connection.ConnectionString = @"Provider=Microsoft.ACE.OLEDB.12.0;Data
Source=C:DesktopExcelBook1.xlsx;
Extended Properties='Excel 12.0 Xml; HDR = YES'";
connection.Open();
OleDbCommand command = new OleDbCommand();
command.Connection = connection;
string error = comboBox1.SelectedItem.ToString();
command.CommandText = "insert into [Sheet1$] (NAME, MARKS) values('" +
textBox1.Text + "' , '" + error + "') ";
command.ExecuteNonQuery();
MessageBox.Show("data saved");
connection.Close();
Now i need update command for updating any previous data in excel.
c# excel oledbcommand
asked Nov 21 at 11:32
Viswanathan L
128
You should always use parameters when you want to use user input in an SQL query. Your approach is currently wide open for SQL injection. It might be just excel, but you should make the right approach a habit.
– Sefe
Nov 21 at 11:34
Possible duplicate of Update Excel 2007 with OleDb
– ikram
Nov 21 at 11:41
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have a form with textbox and combobox. I am inserting data from those two boxes into excel using OleDb insert into command
OleDbConnection connection = new OleDbConnection();
connection.ConnectionString = @"Provider=Microsoft.ACE.OLEDB.12.0;Data
Source=C:DesktopExcelBook1.xlsx;
Extended Properties='Excel 12.0 Xml; HDR = YES'";
connection.Open();
OleDbCommand command = new OleDbCommand();
command.Connection = connection;
string error = comboBox1.SelectedItem.ToString();
command.CommandText = "insert into [Sheet1$] (NAME, MARKS) values('" +
textBox1.Text + "' , '" + error + "') ";
command.ExecuteNonQuery();
MessageBox.Show("data saved");
connection.Close();
Now i need update command for updating any previous data in excel.
c# excel oledbcommand
asked Nov 21 at 11:32
Viswanathan L
128
I have a form with textbox and combobox. I am inserting data from those two boxes into excel using OleDb insert into command
OleDbConnection connection = new OleDbConnection();
connection.ConnectionString = @"Provider=Microsoft.ACE.OLEDB.12.0;Data
Source=C:DesktopExcelBook1.xlsx;
Extended Properties='Excel 12.0 Xml; HDR = YES'";
connection.Open();
OleDbCommand command = new OleDbCommand();
command.Connection = connection;
string error = comboBox1.SelectedItem.ToString();
command.CommandText = "insert into [Sheet1$] (NAME, MARKS) values('" +
textBox1.Text + "' , '" + error + "') ";
command.ExecuteNonQuery();
MessageBox.Show("data saved");
connection.Close();
Now i need update command for updating any previous data in excel.
c# excel oledbcommand
c# excel oledbcommand
asked Nov 21 at 11:32
Viswanathan L
128
asked Nov 21 at 11:32
Viswanathan L
128
asked Nov 21 at 11:32
Viswanathan L
128
asked Nov 21 at 11:32
Viswanathan L
128
asked Nov 21 at 11:32
Viswanathan L
128
128
You should always use parameters when you want to use user input in an SQL query. Your approach is currently wide open for SQL injection. It might be just excel, but you should make the right approach a habit.
– Sefe
Nov 21 at 11:34
Possible duplicate of Update Excel 2007 with OleDb
– ikram
Nov 21 at 11:41
add a comment |
You should always use parameters when you want to use user input in an SQL query. Your approach is currently wide open for SQL injection. It might be just excel, but you should make the right approach a habit.
– Sefe
Nov 21 at 11:34
Possible duplicate of Update Excel 2007 with OleDb
– ikram
Nov 21 at 11:41
You should always use parameters when you want to use user input in an SQL query. Your approach is currently wide open for SQL injection. It might be just excel, but you should make the right approach a habit.
– Sefe
Nov 21 at 11:34
You should always use parameters when you want to use user input in an SQL query. Your approach is currently wide open for SQL injection. It might be just excel, but you should make the right approach a habit.
– Sefe
Nov 21 at 11:34
Possible duplicate of Update Excel 2007 with OleDb
– ikram
Nov 21 at 11:41
Possible duplicate of Update Excel 2007 with OleDb
– ikram
Nov 21 at 11:41
add a comment |
1 Answer
1
active
oldest
votes
up vote
1
down vote
accepted
Your UPDATE query would look like this. I am using parameters for the user-provided values, as you should do too in your INSERT:
OleDbCommand command = new OleDbCommand();
command.CommandText = "update [Sheet1$] set MARKS = @Marks where NAME = @Name";
command.Paramerers.Add(new OleDbParameter("@Marks", error));
command.Paramerers.Add(new OleDbParameter("@Name", textBox1.Text));
answered Nov 21 at 11:38
Sefe
10.2k52242
i got it thanks
– Viswanathan L
Nov 21 at 13:11
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
1
down vote
accepted
Your UPDATE query would look like this. I am using parameters for the user-provided values, as you should do too in your INSERT:
OleDbCommand command = new OleDbCommand();
command.CommandText = "update [Sheet1$] set MARKS = @Marks where NAME = @Name";
command.Paramerers.Add(new OleDbParameter("@Marks", error));
command.Paramerers.Add(new OleDbParameter("@Name", textBox1.Text));
answered Nov 21 at 11:38
Sefe
10.2k52242
i got it thanks
– Viswanathan L
Nov 21 at 13:11
add a comment |
up vote
1
down vote
accepted
Your UPDATE query would look like this. I am using parameters for the user-provided values, as you should do too in your INSERT:
OleDbCommand command = new OleDbCommand();
command.CommandText = "update [Sheet1$] set MARKS = @Marks where NAME = @Name";
command.Paramerers.Add(new OleDbParameter("@Marks", error));
command.Paramerers.Add(new OleDbParameter("@Name", textBox1.Text));
answered Nov 21 at 11:38
Sefe
10.2k52242
i got it thanks
– Viswanathan L
Nov 21 at 13:11
add a comment |
up vote
1
down vote
accepted
up vote
1
down vote
accepted
Your UPDATE query would look like this. I am using parameters for the user-provided values, as you should do too in your INSERT:
OleDbCommand command = new OleDbCommand();
command.CommandText = "update [Sheet1$] set MARKS = @Marks where NAME = @Name";
command.Paramerers.Add(new OleDbParameter("@Marks", error));
command.Paramerers.Add(new OleDbParameter("@Name", textBox1.Text));
answered Nov 21 at 11:38
Sefe
10.2k52242
Your UPDATE query would look like this. I am using parameters for the user-provided values, as you should do too in your INSERT:
OleDbCommand command = new OleDbCommand();
command.CommandText = "update [Sheet1$] set MARKS = @Marks where NAME = @Name";
command.Paramerers.Add(new OleDbParameter("@Marks", error));
command.Paramerers.Add(new OleDbParameter("@Name", textBox1.Text));
answered Nov 21 at 11:38
Sefe
10.2k52242
edited Nov 21 at 11:44
answered Nov 21 at 11:38
Sefe
10.2k52242
answered Nov 21 at 11:38
Sefe
10.2k52242
answered Nov 21 at 11:38
Sefe
10.2k52242
10.2k52242
i got it thanks
– Viswanathan L
Nov 21 at 13:11
add a comment |
i got it thanks
– Viswanathan L
Nov 21 at 13:11
i got it thanks
– Viswanathan L
Nov 21 at 13:11
i got it thanks
– Viswanathan L
Nov 21 at 13:11
add a comment |
draft saved
draft discarded
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53411187%2fc-sharp-form-oledb-excel-update-command-for-data-in-textbox-and-combobox%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
You should always use parameters when you want to use user input in an SQL query. Your approach is currently wide open for SQL injection. It might be just excel, but you should make the right approach a habit.
– Sefe
Nov 21 at 11:34
Possible duplicate of Update Excel 2007 with OleDb
– ikram
Nov 21 at 11:41