Reputation: 459
i'm using vb.net and sql as my db
why my db could not display of my search data ?
my date format that store in db like this = MM/DD/YYYY
Private Function GetDate(ByVal strDev As String, ByVal strDate As String) As DataSet
Dim connectionString As String = "server='abc'; user id='abc'; password='abc'; Database='abc'"
Dim sqlConnection As SqlClient.SqlConnection = New SqlClient.SqlConnection(connectionString)
Dim queryString As String = "SELECT Time_stamp, BB_ID, Status FROM rawdata WHERE (BB_ID = '" & strDev & "') AND (Time_stamp = '5/1/2011')"
Dim sqlCommand As SqlClient.SqlCommand = New SqlClient.SqlCommand(queryString, sqlConnection)
sqlCommand.Parameters.Add("@strDev", System.Data.SqlDbType.Char).Value = strDev
sqlCommand.Parameters.Add("@strDate", System.Data.SqlDbType.Char).Value = strDate
Dim dataAdapter As SqlClient.SqlDataAdapter = New SqlClient.SqlDataAdapter(sqlCommand)
Dim dataSet As DataSet = New DataSet
dataAdapter.Fill(dataSet)
Return dataSet
End Function
Upvotes: 1
Views: 683
Reputation: 92845
Change
Dim queryString As String = "SELECT Time_stamp, BB_ID, Status FROM rawdata WHERE (BB_ID = '" & strDev & "') AND (Time_stamp = '5/1/2011')"
to
Dim queryString As String = "SELECT Time_stamp, BB_ID, Status FROM rawdata WHERE BB_ID = @strDev AND Time_stamp = @strDate"
Upvotes: 3