having error with mysql vb.net [closed] - mysql

Question

Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 8 years ago.
Improve this question
this is my code and im having the problems for 2 hours now
Dim Query As String
con.Open()
Query = "INSERT INTO `" & finalTableName & "` VALUES" & _
"(" & _
" '" & varDateTime & "'," & _
" '" & varComputer & "'," & _
" '" & vard & "'," & _
" '" & varll & "' ," & _
" '" & varPp & "'," & _
" '" & varVv & "' ," & _
" '" & varIi & "' ," & _
" '" & varIc & "'," & _
" '" & varPc & "'," & _
" '" & varSs & "'," & _
" '" & varRd & "'," & _
" '" & varIpd & "'," & _
" '" & varMg & "'," & _
" '', " & _
" '" & varRuleId & "', " & _
" '" & varDateUploaded & "' " & _
")"
Dim cmd As MySqlCommand = New MySqlCommand(Query, con)
If (cmd.ExecuteNonQuery()) Then
End If
con.Close()
This is the problem that im having
You have an error in your SQL syntax; check the manual that corresponds to
your MySQL server version for the right syntax to use near 'dd', 'Deleted',
'344', '', '4', '2014-03-05 15:29:37' )' at line 1

Answer 1

Use command parameters
Dim Query As String
Query = "INSERT INTO `" & finalTableName & _
"` VALUES(#1, #2, #3, #4, #5, #6, #7, #8, #9, #10, #11, #12, #13, '', #14, #15)"
Dim cmd As MySqlCommand = New MySqlCommand(Query, con)
cmd.AddWithValue("#1", varDateTime);
cmd.AddWithValue("#2", varComputer);
cmd.AddWithValue("#3", vard);
cmd.AddWithValue("#4", varll);
cmd.AddWithValue("#5", varPp);
cmd.AddWithValue("#6", varVv);
cmd.AddWithValue("#7", varIi);
cmd.AddWithValue("#8", varIc);
cmd.AddWithValue("#9", varPc);
cmd.AddWithValue("#10", varSs);
cmd.AddWithValue("#11", varRd);
cmd.AddWithValue("#12", varIpd);
cmd.AddWithValue("#13", varMg);
cmd.AddWithValue("#14", varRuleId);
cmd.AddWithValue("#15", varDateUploaded);
con.Open()
If cmd.ExecuteNonQuery() = 1 Then
End If
con.Close()
The parameters will automatically be add the right way correponding the column type (text as text, numbers as numbers, dates as dates).
Also I recommend to add the column names part. This makes the command safer. If you later add or remove columns and the column order is changed, it will still work or at least throw an exception and not silently insert a value into a wrong column.
INSERT INTO table (col1, col2, col3) VALUES (val1, val2, val3)

Answer 2

Get rid of the ` and use ' instead.
As in:
`" & finalTableName & "`
should be
'" & finalTableName & "'