Image.MemoryStream : Parameter not valid

Question

When I'm trying to retrieve my image by combo box there show the massage . Parameter not valid I was try many way but problem is same ..

Every time I run the code below, I get same massage.

    private void cBoxSearch_SelectedIndexChanged(object sender, EventArgs e)
    {
        try
        {
            con = ConnectionController.GetInstance().GetConnection();
            con.Open();
            com = new SQLiteCommand("SELECT * FROM Stock WHERE ProductName = '" + cBoxSearch.Text + "' ", con);

            myReader = com.ExecuteReader();
            product prod = new product();
            while (myReader.Read())
            {
                prod.proid = myReader[0].ToString();
                prod.prodname = myReader[1].ToString();
                prod.proMdl = myReader[2].ToString();
                prod.serialN = myReader[3].ToString();
                prod.byibgPr = myReader[4].ToString();
                prod.sellPr = myReader[5].ToString();
                prod.quantity = myReader[6].ToString();

                tbxProductID.Text = prod.proid;
                tbxName.Text =prod.prodname;
                tbxModel.Text = prod.proMdl;
                tbxserial.Text = prod.serialN;
                tbxbyingprice.Text = prod.byibgPr;
                tbxSellingprice.Text = prod.sellPr;
                tbxQuantity.Text = prod.quantity;

                prod.imgg = (byte[])(myReader[7] );

                if (prod.imgg == null)
                {
                    pBX.Image = null;

                }
                else
                {
                    MemoryStream mstrm = new MemoryStream(prod.imgg);
                    Bitmap bmp = new Bitmap(mstrm);

                }

            }
            con.Close();
        }
        catch (Exception ex)
        {
            MessageBox.Show(ex.Message);
            com.Cancel();
            con.Close();
        }

enter image description here

Please tell me where is the SQL injection vulnerability .... — Younis Rahman, Oct 09 '16 at 16:38
May I enter `1' or 1 = 1; drop table Stock ' --` into your form? — MakePeaceGreatAgain, Oct 09 '16 at 16:41
Use SQL Parameters - its hard to find a DB related post here which doesnt show how to do it correctly. — Ňɏssa Pøngjǣrdenlarp, Oct 09 '16 at 17:11

score 0 · Accepted Answer · edited May 23 '17 at 10:32

0

Try to consult this question:

convert binary to bitmap using memory stream

Also, it might depend on DBType of the 8th column of the query.

edited May 23 '17 at 10:32

Community

1
1

answered Nov 01 '16 at 06:35

Gerren

56
6

Image.MemoryStream : Parameter not valid

1 Answers1

Linked