"Robbe Morris - [MVP] C#" <info@eggheadcafe.com> wrote in message
news:uSOdygWAIHA.1184@TK2MSFTNGP04.phx.gbl...
> Definitely option #1. You don't want people passing in strings
> that you are going to append to dynamic sql. Big security risk.
>
> Plus, you want a structured and "obvious" set of methods for
> other developers to look at whether you are the only developer
> or not. Noone would know how to properly format "criteria"
> in option #2.
>
> --
> Robbe Morris [Microsoft MVP - Visual C#]
> .NET PropertyGrid Control - ListBox, ComboBox, and Custom Classes
> http://www.eggheadcafe.com/tutorials/aspnet/270e9432-d236-47e7-b1af-5cd3abe27a75/net-propertygrid-control.aspx
>
>
>
>
> "Bill Gower" <billgower@charter.net> wrote in message
> news:u12XyMVAIHA.4844@TK2MSFTNGP02.phx.gbl...
>>I am currently reevaluating how I do look ups and searches. What is the
>>best method for handling forms where user can search by different
>>criteria. Example, A member form allows users to look up a member by
>>either SSN, Lastname + firstname (whole or partial), all active or
>>inactive or by an office. Should I have multiple Get Methods such as
>>
>> GetMemberBySSN()
>> GetMemberByMemberName()
>> GerMemberByOffice()
>> GetMemberByStatus()
>> GetMemberByStatusOffice()
>>
>> or
>>
>> GetMemberWithCriteria(string criteria) and then append the criteria
>> string to a WHERE clause.
>>
>> Bill
>>
>>
>