public string updateAssignment_info(Assignment_info x) { string connectionString = this.Connect(); string str2 = ""; SqlConnection connection = new SqlConnection(connectionString); SqlCommand command = connection.CreateCommand(); command.CommandText = "UPDATE [dbo].[assignment_info] SET [date_of_assignment] ='" + x.date_of_assignment + "',[assignee_name] = '" + ConvertApos2Tab(x.assignee_name) + "',[assignee_address] = '" + ConvertApos2Tab(x.assignee_address) + "', "; command.CommandText += " [assignee_nationality] = '" + x.assignee_nationality + "',[assignor_name] = '" + ConvertApos2Tab(x.assignor_name) + "',[assignor_address] = '" + ConvertApos2Tab(x.assignor_address) + "' , "; command.CommandText += " [assignor_nationality] = '" + x.assignor_nationality + "',[log_staff] = '" + x.log_staff + "',[xvisible] = '" + x.visible + "' WHERE xID ='" + x.ID + "' "; connection.Open(); str2 = command.ExecuteNonQuery().ToString(); connection.Close(); return str2; }
public List<Assignment_info> getAssignment_infoByvalidationID(string validationID) { List<Assignment_info> list = new List<Assignment_info>(); new Assignment_info(); SqlConnection connection = new SqlConnection(this.Connect()); SqlCommand command = new SqlCommand("SELECT * FROM assignment_info WHERE log_staff='" + validationID + "' ", connection); connection.Open(); SqlDataReader reader = command.ExecuteReader(CommandBehavior.CloseConnection); while (reader.Read()) { Assignment_info item = new Assignment_info { ID = reader["xID"].ToString(), date_of_assignment = reader["date_of_assignment"].ToString(), assignee_name = ConvertTab2Apos(reader["assignee_name"].ToString()), assignee_address = ConvertTab2Apos(reader["assignee_address"].ToString()), assignee_nationality = reader["assignee_nationality"].ToString(), assignor_name = ConvertTab2Apos(reader["assignor_name"].ToString()), assignor_nationality = reader["assignor_nationality"].ToString(), assignor_address = ConvertTab2Apos(reader["assignor_address"].ToString()), log_staff = reader["log_staff"].ToString(), visible = reader["xvisible"].ToString() }; list.Add(item); } reader.Close(); return list; }
public string addAssignment_info(Assignment_info c_ass) { string connectionString = this.Connect(); string succ = ""; SqlConnection connection = new SqlConnection(connectionString); SqlCommand command = connection.CreateCommand(); command.CommandText = "INSERT INTO assignment_info (date_of_assignment,assignee_name,assignee_address,assignee_nationality,assignor_name,assignor_address,assignor_nationality,log_staff,xvisible) VALUES (@date_of_assignment,@assignee_name,@assignee_address,@assignee_nationality,@assignor_name,@assignor_address,@assignor_nationality,@log_staff,@xvisible) SELECT SCOPE_IDENTITY()"; connection.Open(); command.Parameters.Add("@date_of_assignment", SqlDbType.VarChar, 50); command.Parameters.Add("@assignee_name", SqlDbType.VarChar); command.Parameters.Add("@assignee_address", SqlDbType.Text); command.Parameters.Add("@assignee_nationality", SqlDbType.VarChar, 50); command.Parameters.Add("@assignor_name", SqlDbType.VarChar); command.Parameters.Add("@assignor_address", SqlDbType.Text); command.Parameters.Add("@assignor_nationality", SqlDbType.VarChar, 50); command.Parameters.Add("@log_staff", SqlDbType.VarChar, 50); command.Parameters.Add("@xvisible", SqlDbType.VarChar, 10); command.Parameters["@date_of_assignment"].Value = c_ass.date_of_assignment; command.Parameters["@assignee_name"].Value = ConvertApos2Tab(c_ass.assignee_name); command.Parameters["@assignee_address"].Value = ConvertApos2Tab(c_ass.assignee_address); command.Parameters["@assignee_nationality"].Value = c_ass.assignee_nationality; command.Parameters["@assignor_name"].Value = ConvertApos2Tab(c_ass.assignor_name); command.Parameters["@assignor_address"].Value = ConvertApos2Tab(c_ass.assignor_address); command.Parameters["@assignor_nationality"].Value = c_ass.assignor_nationality; command.Parameters["@log_staff"].Value = c_ass.log_staff; command.Parameters["@xvisible"].Value = c_ass.visible; succ = command.ExecuteScalar().ToString(); connection.Close(); return succ; }