Invalid column name sql error

by

You probably need quotes around those string fields, but, you should be using parameterized queries!

cmd.CommandText = "INSERT INTO Data ([Name],PhoneNo,Address) VALUES (@name, @phone, @address)";
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@name", txtName.Text);
cmd.Parameters.AddWithValue("@phone", txtPhone.Text);
cmd.Parameters.AddWithValue("@address", txtAddress.Text);
cmd.Connection = connection;

Incidentally, your original query could have been fixed like this (note the single quotes):

"VALUES ('" + txtName.Text + "','" + txtPhone.Text + "','" + txtAddress.Text + "');";

but this would have made it vulnerable to SQL Injection attacks since a user could type in 

'; drop table users; --

into one of your textboxes. Or, more mundanely, poor Daniel O’Reilly would break your query every time.

More Related Contents:

  1. Insert 2 million rows into SQL Server quickly
  2. SQL WHERE clause matching values with trailing spaces
  3. Creating a database programmatically in SQL Server
  4. SqlConnection.Close() inside using statement
  5. Received an invalid column length from the bcp client for colid 6
  6. Accessing directly a Sql Server Database in Xamarin.Forms
  7. When executing a stored procedure, what is the benefit of using CommandType.StoredProcedure versus using CommandType.Text?
  8. Is SqlConnection.Close() need inside a Using statement?
  9. How To Access Two Databases in a Single connection String in C#?
  10. C#: SQL Server Connection String
  11. An unhandled exception of type ‘System.InvalidOperationException’ occurred in System.Data.dll?
  12. Insert entire DataTable into database at once instead of row by row?
  13. SQL Query slow in .NET application but instantaneous in SQL Server Management Studio
  14. How to execute an SSIS package from .NET?
  15. How to retrieve data from a SQL Server database in C#?
  16. Bulk Update in C#
  17. SqlParameter does not allows Table name – other options without sql injection attack?
  18. What’s the fastest way to bulk insert a lot of data in SQL Server (C# client)
  19. Delete a single record from Entity Framework?
  20. How to pass XML from C# to a stored procedure in SQL Server 2008?
  21. How to use SqlCommand to CREATE DATABASE with parameterized db name?
  22. ExecuteNonQuery returning -1 when using sql COUNT despite the query string
  23. GO statements blowing up sql execution in .NET
  24. How to Identify the primary key duplication from a SQL Server 2008 error code?
  25. Provider named pipes provider error 40 could not open a connection to SQL Server error 2 [duplicate]
  26. Is it possible to use SqlGeography with Linq to Sql?
  27. Can I commit changes to actual database while debugging C# in Visual Studio?
  28. Should the order of LINQ query clauses affect Entity Framework performance?
  29. How do I connect to a SQL database from C#?
  30. Could not load file or assembly ‘MySql.Data, Version=6.2.2.0

Leave a Comment