View Single Post
Old Feb 23rd, 2007, 7:21 PM   #4
Abyss
Newbie
 
Join Date: Apr 2005
Posts: 18
Rep Power: 0 Abyss is on a distinguished road
Quote:
Originally Posted by Arevos View Post
The TextBox class has the property Text, rather than Value, to denote the input.

As an aside, the way you've built up your SQL string would give a malicious user direct access to the database via an SQL injection attack. If this is just a local database that the user has access to anyway, then there probably isn't any problem. However, it's something of a bad habit to get into.
Just out of interest, what would be the correct way to build the SQL string? This database is under minimal risk to be targetted by a malicious user though it would be good to know for the future.

Thanks for the textbox information also, I'll change it on Monday.
Abyss is offline   Reply With Quote