> Hey there,, I know when updating,, Access can be differnt from SQL
> server
>
> this works in access from a vb.net 1.1 prog
>
>
> SQL = "Update Clients SET UnameID= '" + updatevalue + "' WHERE ID = " +
>
> checkValue + ""
>
>
> Can anyone just quickly tell me what i have to change for it to work in
>
> SQL server 2005?
>
>
> Thanx..
>

Rad [Visual C# MVP] wrote:
> It will work as is, but you are exposing yourself to SQL injection
> attacks as well as errors when someone passes a value like o'malley.
>
> Try and use parameterized SQL as much as possible
>
> On 30 Nov 2006 20:24:42 -0800, "Bonzol" <Bonzol@hotmail.com> wrote:
>
> >Hey there,, I know when updating,, Access can be differnt from SQL
> >server
> >
> >this works in access from a vb.net 1.1 prog
> >
> >
> >SQL = "Update Clients SET UnameID= '" + updatevalue + "' WHERE ID = " +
> >
> >checkValue + ""
> >
> >
> >Can anyone just quickly tell me what i have to change for it to work in
> >
> >SQL server 2005?
> >
> >
> >Thanx..
> --
>
> Bits.Bytes.
> http://bytes.thinkersroom.com