asked
Command Text Syntax
I'm getting a syntax error near the 'MgrName' value that in the sql statement. How do you format the command text? Using cmd2 As SqlCommand = New SqlCommand("UPDATE DetalTable SET MgrName =" _ & MgrName & "Where EmployeeID=" & EmpDeptID, conn2)
You haven't put the value inside single quotes (I'm guessing it's a string value). But I would also recommend you using SqlParameter object instead of using your string handling, in order to avoid SQL Injection. Like this: Using cmd2 as SqlCommand = New SqlCommand( _ "UPDATE DetalTable SET MgrName =@MgrName Where EmployeeID=@EmpDeptID", conn2) cmd2.Parameters.AddWithValue("@MgrName",MgrName) cmd2.Parameters.AddWithValue("@EmpDeptID", EmpDeptID)
