ASP script - sql insert

vb1992

Well-Known Member

Licensed User

Longtime User

• Sep 17, 2012

• #2

try these links:

Accessing Data with ADO

Filtering SQL injection from Classic ASP - Nazim's IIS Security Blog : The Official Microsoft IIS Site

 

Upvote 0

S

Stephenz43

Member

Licensed User

Longtime User

• Sep 17, 2012

• #3

Thank you for the info...

I am a novice with asp / aspx programs and scripts. I am just trying to add ( insert ) a single row of data to a MS SQL Server database that resides on a remote server with the Android . I understand from a tutorial that MS SQL Server cannot be "talked to " directly. If that is the case when issuing a select statement, is it the same with a insert statement.

 

Upvote 0

mc73

Well-Known Member

Licensed User

Longtime User

• Sep 17, 2012

• #4

I use the almost same procedure with mySQL, so I suppose it's the same to execute a Select or an Insert.

 

Upvote 0

vb1992

Well-Known Member

Licensed User

Longtime User

• Sep 17, 2012

• #5

You should be able to switch your select statement to an insert statment easily. You might run into a permission problem on your server, that you don't have update/insert privileged turned on. But otherwise it should be easy.

Select * from people

INSERT INTO people (firstname, lastname, country) VALUES ('value1', 'value2', 'value3')

SQL INSERT INTO Statement



http://www.b4x.com/forum/basic4andr...-classic-asp-iis-5-1-msaccess.html#post117721

 

Upvote 0

S

Stephenz43

Member

Licensed User

Longtime User

• Sep 17, 2012

• #6

I have cut and paste a section of the tutorial dealing with my question. I assume the bold area needs to be changed from a reader to execute a nonquery. I am not fluent with c# so Im having difficulty

c = Request.QueryString["query"]; //for debugging with the browser
//you can set the query by adding the query parameter For ex: <a href="http://127.0.0.1/test.aspx?query=select" target="_blank">http://127.0.0.1/test.aspx?query=select</a> * from table1
if (c == null)
c = sr.ReadToEnd();
try
{
SqlCommand cmd = new SqlCommand(c, cn);
cn.Open();
SqlDataReader rdr = cmd.ExecuteReader(CommandBehavior.CloseConnection);
List<Dictionary<string, object>> list = new List<Dictionary<string, object>>();
while (rdr.Read())
{
Dictionary<string, object> d = new Dictionary<string, object>(rdr.FieldCount);
for (int i =0;i < rdr.FieldCount;i++)
{
d[rdr.GetName(i)] = rdr.GetValue(i);
}
list.Add(d);
}
JavaScriptSerializer j = new JavaScriptSerializer();
Response.Write(j.Serialize(list.ToArray()));

 

Upvote 0

Erel

B4X founder

Staff member

Licensed User

Longtime User

• Sep 18, 2012

• #7

You should use cmd.ExecuteNonQuery instead of ExecuteReeader.
SqlCommand.ExecuteNonQuery Method (System.Data.SqlClient)
The code that deals with the query result should be removed.

 

Upvote 0

S

Stephenz43

Member

Licensed User

Longtime User

• Sep 26, 2012

• #8

Been away for a bit... Now have time to figure this out...

I have the script that works well. Its been tested on the MS sql server from a workstation by issuing the following....

http://servermachine/192.168.0.102/script1.aspx?query=Insert into tblbp ( bpsys)values(89). ..... one record is added

Does anyone have the B4A code to issue the insert statement within the Android app?

 

Upvote 0

Erel

B4X founder

Staff member

Licensed User

Longtime User

• Sep 26, 2012

• #9

It should be similar to issuing a select statement.

 

Upvote 0