Search code examples
asp.netsqlsqlhelper

How to make value of a column name appear with single apostrophe in sql statement of sql helper inside asp. net

 SQLHelper sqhlpr = new SQLHelper();
    sqhlpr.SqlText = "Select StudentName from tblStudentInfo where class=" + NurseryButton.Text;
    DataTable dt = sqhlpr.getDataTable(false);

This is my code.Now the result of sqhlpr.sqlText is 

select StudentName from tblStudentInfo where class= **Nursery**

(i.e.NurseryButton.Text=Nursery) but the result that i want is select StudentName from tblStudentInfo where class= 'Nursery'.How can this be done??? This looks simple but I can't just figure it out...

Solution 
  • "Select StudentName from tblStudentInfo where class='" + NurseryButton.Text + "'";

    But you definitively should not use it that way! (SQL Injection)

    Here is a good answer: Sql inline query with parameters. Parameter is not read when the query is executed