public void UpdateBUR(BURModel BUR) { SqlConnection conn = new SqlConnection(); conn.ConnectionString = Properties.Resources.ConnectionStringLocal; using (conn) { conn.Open(); //Insert items first. foreach (var item in BUR.Particulars) { SqlCommand _comm = new SqlCommand( "UPDATE dbo.tbl_Item " + "SET Item_Amount = " + item.Amount + ", Acct_Code = '" + item.Code + "', BUR_No = '" + item.BUR_Number + "' WHERE BUR_No = '" + item.BUR_Number + "'", conn); _comm.ExecuteNonQuery(); } //Insert BUR Metadata. SqlCommand comm = new SqlCommand( "UPDATE dbo.tbl_BUR SET " + "BUR_No = '" + BUR.BURNumber + "', BUR_FDate = '" + BUR.Date + "', Office_Code = '" + BUR.OfficeCode + "', BDHead_Number = '20030210', BStaff_Number = '" + BUR.BStaff_Number + "', Employee_Number = '" + BUR.Payee_Number + "', PR_Code = '" + BUR.PRNumber + "', Description = '" + BUR.Description + "'" + "WHERE BUR_No = '" + BUR.BURNumber + "'", conn); comm.ExecuteNonQuery(); } }
public BURModel FillParticulars(BURModel BUR) { SqlConnection conn = new SqlConnection(); conn.ConnectionString = Properties.Resources.ConnectionStringLocal; using (conn) { SqlCommand comm = new SqlCommand( "SELECT * FROM dbo.tbl_Item " + "WHERE BUR_No = '" + BUR.BURNumber + "'", conn); conn.Open(); SqlDataReader reader = comm.ExecuteReader(); if (reader.HasRows) { while (reader.Read()) { BUR.Particulars.Add( new Entities.Items() { Amount = reader.GetDecimal(1), Code = reader.GetString(2), BUR_Number = reader.GetString(3) }); } } } return(BUR); }
public void InsertBUR(BURModel BUR) { SqlConnection conn = new SqlConnection(); conn.ConnectionString = Properties.Resources.ConnectionStringLocal; using (conn) { conn.Open(); //Insert BUR Metadata. SqlCommand comm = new SqlCommand( "INSERT INTO dbo.tbl_BUR VALUES " + "('" + BUR.BURNumber + "', '" + BUR.Date + "', '" + BUR.OfficeCode + "', '20030210', '" + BUR.BStaff_Number + "', '" + BUR.Payee_Number + "', '" + BUR.PRNumber + "', '" + BUR.Description + "', '" + BUR.SignatoryOfficeCode + "')", conn); comm.ExecuteNonQuery(); //Insert PR Number. comm.CommandText = "INSERT INTO dbo.tbl_PR VALUES " + "('" + BUR.PRNumber + "', '" + DateTime.Today.ToString("yyyy-MM-dd") + "')"; comm.ExecuteNonQuery(); //Insert items first. foreach (var item in BUR.Particulars) { SqlCommand _comm = new SqlCommand( "INSERT INTO dbo.tbl_Item (Item_Amount, Acct_Code, BUR_No) " + "VALUES (" + item.Amount + ", " + item.Code + ", '" + item.BUR_Number + "')", conn); _comm.ExecuteNonQuery(); } } }