Data access techniques

I definitely need it, thanks!

Jason

At 07:51 PM 3/26/2006, you wrote:
>Jason,
>
>I won't address all your issues, but I will give you
two things to
>consider.
>
>This part of your code:
>
>          cmd.CommandText = "SELECT ClientID,
EntityID, EntryTypeID,
>ClientLName, ClientFName, ClientMName, " & _
>              "ClientSuffix, SpouseLName,
SpouseFName, SpouseMName,
>SpouseSuffix, Inactive FROM ClientAdvantage."
& _
>              "dbo.Clients WHERE ClientID =
" & intClientID
>
>suggests you may want to read up on parameterised
queries / sql injection.
>http://www.4guysfromrolla.com/webtech/092601-1.2.shtml
is as good as place
>as any to start.
>
>Also,
>http://msdn.microsoft.com/library/d
efault.asp?url=/library/en-us/cpref/html/frlrfsystemdatasqlc
lientsqlcommandclassexecutereadertopic.asp
>  suggests you may want to call dr.Read before trying to
get its values.
>
>Seeya
>Matthew Wills  MLC
>Senior Analyst Programmer

===================================
This list is hosted by DevelopMentorŪ  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com

Jason, if your're using VB 2005 rather than 2002 or 2003,
then getting hold of
a copy of Brain Noyes' book on databinding with Winforms
would help you a lot.
The code examples are in C#, but that's not a big issue for
understanding the
code or translating it to VB. Samples in this book focus
mostly on binding to
XML data such as datasets, but there's also a chapter on
object binding.

Databinding in the VS 2003 version has a number of quirks
that have been
improved or solved in VS 2005.

To get an overview of the rationale for building tiered data
access systems
(for Winforms or Web apps) using an OO approach, based on
the .Net 2002/2003
editions I'd highly recommend Rocky Lhotka's Business
Objects book(s). The C#
2005 version has just be released; the VB 2005 version is
due out in a couple
of weeks.

A core reference on ADO.Net would be also valuable.

Quoting Jason <vbdotnetPINEAPPLELANE.COM>:

> I definitely need it, thanks!
>
> Jason
>
> At 07:51 PM 3/26/2006, you wrote:
> >Jason,
> >
> >I won't address all your issues, but I will give
you two things to
> >consider.
> >
> >This part of your code:
> >
> >          cmd.CommandText = "SELECT ClientID,
EntityID, EntryTypeID,
> >ClientLName, ClientFName, ClientMName, "
& _
> >              "ClientSuffix, SpouseLName,
SpouseFName, SpouseMName,
> >SpouseSuffix, Inactive FROM ClientAdvantage."
& _
> >              "dbo.Clients WHERE ClientID =
" & intClientID
> >
> >suggests you may want to read up on parameterised
queries / sql injection.
> >http://www.4guysfromrolla.com/webtech/092601-1.2.shtml
is as good as place
> >as any to start.
> >
> >Also,
> >http://msdn.microsoft.com/library/default.asp?url=
/library/en-
us/cpref/html/frlrfsystemdatasqlclientsqlcommandclassexecute
readertopic.asp
> >  suggests you may want to call dr.Read before
trying to get its values.
> >
> >Seeya
> >Matthew Wills  MLC
> >Senior Analyst Programmer
>
> ===================================
> This list is hosted by DevelopMentorŪ  http://www.develop.com
>
> View archives and manage your subscription(s) at http://discuss.develop.com

>




------------------------------------------------------
This message was sent using Delmarva Online's Webmail.
http://www.dmv.com/

===================================
This list is hosted by DevelopMentorŪ  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com