編輯code.How從asp.net使用vb.net下拉列表中顯示gridview

Question

嗨我已經發布了這個問題，但dint得到答案，請幫助我通過下拉列表顯示gridview。下面是一個沒有必要的，因爲filter有你已經在查詢的末尾添加相同的值在vb.net

 Private Sub BindGridView() 
    Dim filter As String = "" 
    If ddlOwnerDepartment.SelectedValue <> "" Then 
     filter = filter & " AND OwnerDepartment ='" & ddlOwnerDepartment.SelectedValue & "'" 
    End If 
    Dim table1 As DataTable = New DataTable("Details") 
    table1.Columns.Add("ReferenceNo") 
    table1.Columns.Add("Title") 
    table1.Columns.Add("Counterparty") 
    table1.Columns.Add("OwnerDepartment") 
    table1.Columns.Add("Status") 
    table1.Columns.Add("CreatedBy") 
    table1.Columns.Add("CreatedOn") 
    table1.Columns.Add("link") 
    table1.Rows.Clear() 
    Dim conSQL As New SqlConnection(conStrDRS) 
    conSQL.Open() 
    Dim cmdSQL As SqlCommand = New SqlCommand("SELECT Title, ReferenceNo,OwnerDepartment,CreatedBy,CreatedOn,Status,Counterparty " & _ 
            " FROM [dbo].[Registration]" & filter) 

    cmdSQL.Connection = conSQL 
    Dim adptSQL As New SqlClient.SqlDataAdapter(cmdSQL) 
    Dim myDataSet As New DataSet() 
    adptSQL.Fill(myDataSet) 
    conSQL.Close() 
    gvDetails.DataSource = myDataSet.Tables(0) 'dvAlert 
    gvDetails.DataBind() 
End Sub   

Private Sub btnSearch_Click(sender As Object, e As EventArgs) Handles btnSearch.Click 
    BindGridView() 
End Sub 

Answer 1

代碼你是串聯filter和sql query結束。

也不要連接值使用Parameterized SQL。像這樣添加參數到你的sql查詢中。

Dim cmdSQL As SqlCommand = New SqlCommand("SELECT Title, ReferenceNo,OwnerDepartment,CreatedBy,CreatedOn,Status,Counterparty " & 
           " FROM [dbo].[Registration] Where OwnerDepartment=@OwnerDepartment"); 
cmdSQL.Paramters.AddWithValue("@OwnerDepartment",ddlOwnerDepartment.SelectedValue); 

編輯

Private Sub BindGridView(bool showAll) 
Dim filter As String = "" 
If ddlOwnerDepartment.SelectedValue <> "" Then 
    filter = filter & " AND OwnerDepartment ='" & ddlOwnerDepartment.SelectedValue & "'" 
End If 
Dim table1 As DataTable = New DataTable("Details") 
table1.Columns.Add("ReferenceNo") 
table1.Columns.Add("Title") 
table1.Columns.Add("Counterparty") 
table1.Columns.Add("OwnerDepartment") 
table1.Columns.Add("Status") 
table1.Columns.Add("CreatedBy") 
table1.Columns.Add("CreatedOn") 
table1.Columns.Add("link") 
table1.Rows.Clear() 
Dim conSQL As New SqlConnection(conStrDRS) 
conSQL.Open() 
Dim cmdSQL As SqlCommand = New SqlCommand("SELECT Title, ReferenceNo,OwnerDepartment,CreatedBy,CreatedOn,Status,Counterparty FROM [dbo].[Registration] "; 

if showAll==false then 
cmdSQL += "Where OwnerDepartment=@OwnerDepartment"); 
cmdSQL.Paramters.AddWithValue("@OwnerDepartment",ddlOwnerDepartment.SelectedValue); 
End If 

cmdSQL.Connection = conSQL 
Dim adptSQL As New SqlClient.SqlDataAdapter(cmdSQL) 
Dim myDataSet As New DataSet() 
adptSQL.Fill(myDataSet) 
conSQL.Close() 
gvDetails.DataSource = myDataSet.Tables(0) 'dvAlert 
gvDetails.DataBind() 
End Sub 

Private Sub btnSearch_Click(sender As Object, e As EventArgs) Handles btnSearch.Click 
BindGridView(true) 
End Sub 

現在，當您從dropdown search通從函數調用這個函數以虛假BindGridView(false)