Invalid object name 'DB'

Question

I am a beginner and would like to implement basic login page using C#.net - web application. I have created database successfully and can test connection worked as well. I get the below error message when the control hits ExecuteReader() command.

Error:

An exception of type 'System.Data.SqlClient.SqlException' occurred in System.Data.dll but was not handled in user code

Additional information: Invalid object name 'UserDB'.

Program:

string LoginDbCS =ConfigurationManager.ConnectionStrings["UserDB"].ConnectionString;
string ID = TextBoxUserId.Text;
SqlConnection Conn = new SqlConnection(LoginDbCS);
{
    string sCmdStr = "select Password from UserDB where UserID=@ID";
    SqlCommand sCmd = new SqlCommand(sCmdStr, Conn);

    SqlParameter param = new SqlParameter();
    param.ParameterName = "@ID";
    param.Value = TextBoxUserId.Text;

    sCmd.Parameters.Add(param);
    Conn.Open();

    SqlDataReader sReader = sCmd.ExecuteReader();
    sReader.Read();

    if ((string)sReader["Password"]==TextBoxPassword.Text)
    {
        Label5.Text = "Login Successful";
    }
    else
    {
        Label5.Text = "No Records found";
    }

    sReader.Close();
    Conn.Close();
}

}

Looking forward for suggestions to fix this crash.

Are you sure your connection is connected to right database? Which schema that `UserDB` table belongs? — Soner Gönül, May 17 '15 at 09:34
Check if you have write the correct name of your table `UserDB`. I guess `UserDB` is your Database name.. You have to select records from a table of your Database — sohaiby, May 17 '15 at 09:35
First execute query on sql server then use in program ... and check `UserDB` is present or not.. — Pradnya Bolli, May 17 '15 at 09:39
What's the name of the table that contains users in your database? — Paolo Costa, May 17 '15 at 09:50
Yeah. As you said, i have put the DB name (UserDB) instead of Table name (Table name: Table). Is there something else i should modify.. After modifying also, I am getting the error as: An exception of type 'System.Data.SqlClient.SqlException' occurred in System.Data.dll but was not handled in user code Additional information: Incorrect syntax near the keyword 'Table'. — Vasanth, May 17 '15 at 09:52
Yeah. Am trying to read the password matching with the userID. — Vasanth, May 17 '15 at 09:55
UserDb is ur database..specify fromm which table insider ur database u r trying to read the password..Also try to execute `select Password from UserDB' from sql server and check is it working fine` — Sachu, May 17 '15 at 11:11

score 2 · Answer 1 · edited May 23 '17 at 11:43

Well, Your question was answered in the comments by sohaiby, but there are some deeper issues with your code, and you should fix those.
I believe that it's easier to learn good coding standards as a beginner then as someone that has experience with bad coding standards, since people often go to what is familiar when thing go bad.

So, here are some bad practices that you should replace A.S.A.P:

Using reserved words as objects names. See my answer to this question for the specifics of the method I use to name sql objects. Other people might use other methods. you don't have to adopt mine, but it's the best I know of.
Retrieving all the passwords from the database and check for the correct password in code. You already know what password the user entered. just add it as another parameter to your sql statement and add a condition:
string sCmdStr = "select * from UserDB where UserID=@ID AND Password = @Password";
Using a reader for queries where you don't actually need the data.
In a login page, usually you only want to know if the user have entered the correct user name and password. There is no need for actual data being returned from the database (unless you want to get some details about the user, such as first / last name, last login date, etc'). In these cases you can probably use ExecuteScalar to get a single value from the database.
If the query returns no results, the ExecuteScalar will return null. read how to handle this here..
Use an IDisposable (SqlConnection in your case) without a Using statement.

I hope this will help you learn better coding standards and improve your coding skills.

Happy programming!

Thanks. Have noted your suggestions. – Vasanth May 17 '15 at 13:41 — Vasanth, May 17 '15 at 13:41

Invalid object name 'DB'

Error:

Program:

1 Answers1