🚀 go-pugleaf

On Mon, 17 Apr 2006 18:00:24 +0430, "M. Noroozi Eghbali"
<galaxy@irandoc.ac.ir> wrote:

> Hi All,
> 
> I used the below code to get the information from a MS Access database file:
> ----------------------------------------------------
>    bdpConnection1.Open();
>    bdpDataAdapter1.SelectCommand.CommandText = "SELECT * FROM Info WHERE
> Email = '" +
>               email.Text + "'";

I'd strongly advise using parameterised queries instead (check out
[paramName] for JET SQL queries, IIRC). The approach you are using
here is a security risk. What if the user typed in <<' OR Email NOT
NULL AND Email <> '>> into your "email" text box?

>    bdpDataAdapter1.FillSchema(dataSet1, SchemaType.Source, "Info");
>    RowNum = bdpDataAdapter1.Fill(dataSet1);
>    if(RowNum != 0)
>    {
>     UserInf.DownloadedFile =
> dataSet1.Tables["Info"].Rows[0]["DownloadedFile"].ToString();//***
>    }
>    bdpConnection1.Close();
> ------------------------------------------------------
> 
> The "DownloadedFile" field of the database is of type Memo. After running
> the code, the value of the UserInf.DownloadedFile is "system.char[]" instead
> of the correct value of that. Any help?

System.Char[] can be converted into a System.String using the String
constructor. So:

---8<---
 char[] downloadedFile = (char[])
dataSet1.Tables["Info"].Rows[0]["DownloadedFile"];
 UserInf.DownloadedFile = new String(downloadedFile);
--->8---
-- Barry