Change the SqlDataSource SelectCommand

Question

I have a SqlDataSource for a gridview. I want to change SelectCommand of that SqlDataSource.

My select command is:

select *   
from JobLog 
where UserName = @username 
  and PrinterName = @printer 
  and TimeSubmitted between @from and @to

I want to replace @username and ... with textboxes.

How can I do this?

**DON'T**! Instead: learn how to **supply proper values** for those parameters - **don't concatenate together your SQL commands!** - this opens all doors to SQL injection attacks - just don't even think about it. Learn the **proper way** - use **parametrized queries** — marc_s, Dec 24 '12 at 14:47
I want to do your way too. but I don't know how can I do this? — Majid Basirati, Dec 24 '12 at 14:55
possible duplicate of [How to pass variable to SelectCommand of SqlDataSource?](http://stackoverflow.com/questions/485821/how-to-pass-variable-to-selectcommand-of-sqldatasource). The first answer of that question will show you how to do this properly with parameters. — Ken White, Dec 24 '12 at 14:57

score 1 · Answer 1 · answered Dec 24 '12 at 14:55

1

In your SQLDataSource, add SqlParameter to it. Add one for each textbox that you want to use for the query. Example:

<SelectParameters>
    <asp:ControlParameter Name="UserName" ControlID="txtUserName" />
</SelectParameters>

answered Dec 24 '12 at 14:55

CM Kanode

Please state that clearly in your question. That will help you get the answers you are looking for. – CM Kanode Dec 24 '12 at 15:21

1 Answers1