• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 476
  • Last Modified:

Pass Session Variables to SQL Query to GridView

Experts,

Having some difficulties with this. I am passing session variables from 3 dropdownlists on one page to another page. On the 2nd page, I am grabbing the variables  and trying to use them in a SQL Query to return results to a GridView. Could really use some help on this.


public partial class results : System.Web.UI.Page
    {
        SqlConnection con = new SqlConnection(WebConfigurationManager.ConnectionStrings["MyConnect"].ConnectionString);
        protected void Page_Load(object sender, EventArgs e)
        {
            
                string ssState = (string)(Session["ssState"]);
                string ssCity = (string)(Session["ssCity"]);                
                string ssType = (string)(Session["ssType"]);

                con.Open();
                SqlCommand com = new SqlCommand("SELECT * FROM dbo.tbl_Property WHERE Prop_State=@ssState AND Prop_City=@ssCity AND Prop_Type=@ssType", con);
                com.Parameters.AddWithValue("@ssState", ssState);
                com.Parameters.AddWithValue("@ssCity", ssCity);                
                com.Parameters.AddWithValue("@ssType", ssType);

                SqlDataAdapter myAdapter = new SqlDataAdapter(com);
                DataSet dSet = new DataSet();
                myAdapter.Fill(dSet);   

                
                
                myGrid.DataSource = dSet;
                myGrid.DataBind();

                con.Close();
            
        }
    }

Open in new window

0
Shaggy1
Asked:
Shaggy1
  • 2
  • 2
1 Solution
 
strickddCommented:
Are you sure you have values in the session variables when you get to this section of code? Debug and step through it to be sure. If you do, take those values and put them in your SQL string and execute that string directly against the SQL server to make sure that you are getting rows back.
0
 
Shaggy1Author Commented:
Thanks for the help. It seems as though I am getting the values. To test it, i used a label to make sure i was getting the values. I had seen that programmers have been placing the values in the SQL string, but wasn't sure if that was the safest way to do it.
Thanks again!
0
 
strickddCommented:
The way you have the SQL - parameterized - is perfect. I'm just suggesting to manaully add the values to the SQL so you can run it in management studio and make sure results are returned. Don't shy away from parameterization!
0
 
Shaggy1Author Commented:
Well, looks like it was one of the variables...i just removed one of them, and the Grid filled up.
Thanks for the help!
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now