Add multiple parameters - string values

Asked Aug 29 '13 at 09:01

Active Jun 10 '14 at 19:31

Viewed 229 times

I have for example this sql command:

string strediska="0003,0005";
SqlCommand cmd = new SqlCommand();
            SqlConnection con = new SqlConnection("****");
            cmd = new SqlCommand("select code from table where stred in (@strediskac)", con);
            cmd.Parameters.Add(new SqlParameter("@strediskac", strediska));

But result is not right. Have you any idea how I could insert more values in one "variable"?

NOW its OK! Thanks for help. My solution:

cmd = new SqlCommand("select code from table where stred in ("+ strediska +")",con);

edited Jun 10 '14 at 19:31

Robert

10,403
14
67
117

asked Aug 29 '13 at 09:01

Kate

1

This would result in select code from table where stred in ('0003,0005') and that is why you are getting it wrong – Giannis Paraskevopoulos Aug 29 '13 at 09:02
2

http://stackoverflow.com/questions/2377506/pass-array-parameter-in-sqlcommand, http://stackoverflow.com/questions/182060/where-in-array-of-ids – iceheaven31 Aug 29 '13 at 09:03
2

http://stackoverflow.com/a/337792/284240 – Tim Schmelter Aug 29 '13 at 09:07
possible duplicate of [Parameterizing an SQL IN clause?](http://stackoverflow.com/questions/337704/parameterizing-an-sql-in-clause) – davioooh Aug 29 '13 at 09:30
1

Note that with your current solution you opened a security issue by sql injection if 'strediska' is user input. – dasheddot Aug 29 '13 at 09:38

Add multiple parameters - string values

0 Answers0