Syntax error in INSERT INTO statement med Session i C#
Hej jeg får følgende fejl med insert sætning i kob tabellen.System.Data.OleDb.OleDbException: Syntax error in INSERT INTO statement.
i linje 48
Line 46: myConnection.Open();
Line 47: OleDbCommand myCommand = new OleDbCommand(strSQL, myConnection );
Line 48: myCommand.ExecuteNonQuery();
Line 49: myConnection.Close();
Line 50: }
Jeg forsøger at læggen en session med ind i tabellen, men jeg ved ikke hvad der er galt her, jeg tænker lidt på onm det kan være prisen som er sat til currency i rækken vPris
Her er hele min kode:
<%@ Page Language="C#" ContentType="text/html" ResponseEncoding="iso-8859-1" debug="true" %>
<%@ import Namespace="System.Data" %>
<%@ import Namespace="System.Data.OleDb" %>
<% string title;
title = "Varekøb i valgte kategori";
Session["session_id"] = Session.SessionID;
%>
<script runat="server">
void Page_Load(object Sender, EventArgs E)
{
string strConnection;
string strSQL;
OleDbConnection objConnection;
OleDbCommand objCommand;
strConnection =@"Provider=Microsoft.JET.OLEDB.4.0;Data Source=" + Server.MapPath("/datab/abcd.mdb");
objConnection = new OleDbConnection(strConnection);
objConnection.Open();
strSQL = "SELECT * FROM varelist WHERE vNummer = " + Request.QueryString["id"];
objCommand = new OleDbCommand(strSQL, objConnection);
tojData.DataSource = objCommand.ExecuteReader(CommandBehavior.CloseConnection);
tojData.DataBind();
objConnection.Close();
}
void kob(object Sender, EventArgs E)
{
string strNummer, strNavn, strSession, strAntal, strPris;
string strSQL;
strSession = Request.QueryString["session_id"];
strNummer = Request.QueryString["tbvNummer"];
strNavn = Request.QueryString["tbvNavn"];
strPris = Request.QueryString["tbvPris"];
strAntal = Request.QueryString["tbvAntal"];
strSQL = "INSERT INTO kurv (sessionID, vNummer, vNavn, vPris, vAntal) Values ('";
strSQL += strSession + "', ";
strSQL += strNummer + ", '";
strSQL += strNavn + "', ";
strSQL += strPris + ", ";
strSQL += strAntal + ")";
//Response.Write(strSQL);
OleDbConnection myConnection = new OleDbConnection(@"Provider=Microsoft.JET.OLEDB.4.0;Data Source=" + Server.MapPath("/datab/abcd.mdb"));
myConnection.Open();
OleDbCommand myCommand = new OleDbCommand(strSQL, myConnection );
myCommand.ExecuteNonQuery();
myConnection.Close();
}
</script>
<!-- #include file="head.aspx" -->
<table>
<tr>
<td>
<h4>Varedetaljer</h4>
</td>
</tr>
<tr>
<td>
<asp:DataList ID="tojData" runat="server" ItemStyle-Font-Name="Arial">
<itemtemplate>
<table>
<tr>
<th align="left" bgcolor="#FFCCFF" class="mainFont">Vare Nummer:</th><th align="left" bgcolor="#FFCCFF" class="mainFont">Vare navn:</th><th align="left" bgcolor="#FFCCFF" class="mainFont">Pris:</th>
</tr>
<tr>
<td class="mainFont"><%# DataBinder.Eval(Container.DataItem, "vNummer") %><asp:textbox Visible="false" ID="tbvNummer" Text='<%# DataBinder.Eval(Container.DataItem, "vNummer") %>' /></td><td class="mainFont"><%# DataBinder.Eval(Container.DataItem, "vNavn") %><asp:textbox Visible="false" ID="tbvNavn" Text='<%# DataBinder.Eval(Container.DataItem, "vNavn") %>' /></td><td class="mainFont"><%# DataBinder.Eval(Container.DataItem, "vPris","{0:C}") %><asp:textbox Visible="false" ID="tbvPris" Text='<%# DataBinder.Eval(Container.DataItem, "vPris","{0:C}") %>' /></td>
</tr>
<tr>
<th colspan="2" align="left" bgcolor="#FFCCFF" class="mainFont">Beskrivelse:</th><th align="left" bgcolor="#FFCCFF" class="mainFont">Billede:</th>
</tr>
<tr>
<td valign="top" colspan="2" class="mainFont"><%# DataBinder.Eval(Container.DataItem, "vBeskriv") %><br />
<br /><br />
Antal: <asp:TextBox ID="tbvAntal" Width="30" Font-Name="arial" MaxLength="3" runat="server" />
<asp:Button ID="btKob" OnClick="kob" runat="server" Text="Tilføj vare"/>
</td><td><img src='<%# "/abcdAdmin/uploadedfiles/"+DataBinder.Eval(Container.DataItem, "vBilled") %>' border="0" ></td>
</tr>
</table>
</itemtemplate>
</asp:DataList>
<br /><br />
<a href="java script:history.back(-1)" class="mainlinks">Tilbage</a>
</td>
</tr>
</table>
<!-- #include file="footer.aspx" -->
