public void insertOrder(Purchase_Order po) { getConnection(); string sql = "insert into Orders(TransactionTypeID, SupplierID, DestinationWarehouseID,Date) values(1, @supplierid, @desid, @date)"; SqlCommand cmd = new SqlCommand(sql, cnn); cmd.Parameters.AddWithValue("supplierid", po.supplierid); cmd.Parameters.AddWithValue("desid", po.warehouseid); cmd.Parameters.AddWithValue("date", po.date); cmd.ExecuteNonQuery(); cnn.Close(); }
public string getWarehouseNameByID(Purchase_Order po) { getConnection(); string sql = "select name from Warehouses where id=@id"; SqlCommand cmd = new SqlCommand(sql, cnn); cmd.Parameters.AddWithValue("id", po.warehouseid); SqlDataReader dr = cmd.ExecuteReader(); while (dr.Read()) { po.warehousename = (string)dr["Name"]; } cnn.Close(); return(po.warehousename); }