retrieving selected value from checkboxlist and using in sql query

Question

I want to create a sql query based on the selected Item from checkboxlist. Just want to remove last comma from the code below.

    String queryt=" And Brand IN(";
        foreach (ListItem lst in brandcklist.Items)
        {
            if (lst.Selected == true)
            {
               queryt += "'"+lst.Text+"',";
            }
        }
        queryt += ")";
        Label3.Text = queryt;

output for this is
And Brand IN('BlackBerry','Karbonn',)
note the comma after karbonn, I don't want to add comma after last item.

You can use string.join. But you should worry about SQL injection — Uriil, May 12 '14 at 13:24
@Uriil can u explain. Currently i just need to do it for my exam tommorow so its ok i will manage. — ALOK, May 12 '14 at 13:26

Ashish Charan · Accepted Answer · 2014-05-12T13:32:17.463

1

Just replace this line

queryt += ")";

with

queryt=queryt.TrimEnd(',') +")";

edited May 12 '14 at 13:32

answered May 12 '14 at 13:26

Ashish Charan

2,347
4
21
33

Its not write. Output now is And Brand IN('BlackBerry','Micromax', – ALOK May 12 '14 at 13:30
I tested it. It works fine. Did u replace the line - > queryt += ")"; ? – Ashish Charan May 12 '14 at 13:33
Yes its working. Actually intellicence selected another var query rather than queryt. Thanks. – ALOK May 12 '14 at 13:36

score 0 · Answer 2 · edited May 23 '17 at 11:57

0

Something like this:

String queryt = string.Format(" And Brand IN ({0})", string.join(", ", brandcklist.Items.Where(p=>p.Selected).Select(p=>p.Text)))

But as i said, it' open for SQL injection. Here is better description, how you should do this

edited May 23 '17 at 11:57

Community

1
1

answered May 12 '14 at 13:30

Uriil

11,948
11
47
68

retrieving selected value from checkboxlist and using in sql query

2 Answers2