protected void Button2_Click(object sender, EventArgs e)
{
using (SqlConnection con = new SqlConnection())
{
con.ConnectionString = @"ADMIN\LOCALHOST;Initial Catalog=maha;Integrated Security=True";
con.Open();
SqlCommand cmd = new SqlCommand("Insert into dbo.student Values ('" + TB1.Text + "','" + TB2.Text + "','" + TB3.Text + "','" + @rm + "')", con);
cmd.ExecuteNonQuery();
con.Close();
}
}
Asked
Active
Viewed 31 times
1

Aristos
- 66,005
- 16
- 114
- 150

shefali jain
- 11
- 7
1 Answers
0
The connection string is wrong on ADMIN\LOCALHOST
and from there come the error message.
Must be like:
con.ConnectionString = @"Data Source=localhost;Initial Catalog=maha;Integrated Security=True";
Beside that you must parameterize your query , to avoid sql injection https://stackoverflow.com/search?q=sql+injection
How does the SQL injection from the "Bobby Tables" XKCD comic work?
and also you can read: Setting up connection string in ASP.NET to SQL SERVER