C#

I followed your advice, sir, regarding possible SQL injection. I may be wrong but I made the parameter request as you told me, but if he has other errors, can you help me please

thank you sir i was afraid i didn't do what you told me.

private void BtnAjouter_Click(object sender, EventArgs e)
       {
           int total;
           decimal total_achat;
           //si les champs sont vides
           if (TxtDesignation.Text == "" || TxtPrixUnitaire.Text == "" || TxtQteCmd.Text == "" || TxtQteStock.Text == "" || TxtRefProduit.Text == "")
           {
               MessageBox.Show("Rassurez vous que tous les champs ont bien été rempli.", "Error", MessageBoxButtons.OK, MessageBoxIcon.Information);
           }
           else
           {
               //Vérifier si la valeur saisie est numeric
               if (Int32.TryParse(TxtQteCmd.Text, out int value) && TxtRefProduit.Text != "")
               {
                   //Vérifier si la commande est inferieur ou egale au stock
                   int a = 0;
                   int b = 0;
                   int c;

                   //Convertire les textBox en int
                   int.TryParse(TxtQteCmd.Text.Trim(), out a);
                   int.TryParse(TxtQteStock.Text.Trim(), out b);
                   int.TryParse(TxtPrixUnitaire.Text.Trim(), out c);

                   if (a <= b)
                   {
                       total = a * c;
                       total_achat = 0;

                       try
                       {
                           //setConnection();
                          // sql_con.Open();
                          // using (sql_cmd = sql_con.CreateCommand())
                           {
                              string txtQuery = "INSERT INTO Detail_temp (ref_det, qute_det, Designation, Prix_unitaire_HT, Prix_total_HT) VALUES (@ref_det,@qute_det,@Designation,@Prix_unitaire_HT,@Prix_total_HT)";
                              sql_cmd.Parameters.AddWithValue("@ref_det", TxtRefProduit.Text);
                              sql_cmd.Parameters.AddWithValue("@qute_det", TxtQteCmd.Text);
                              sql_cmd.Parameters.AddWithValue("@Designation", TxtDesignation.Text);
                              sql_cmd.Parameters.AddWithValue("@Prix_unitaire_HT", TxtPrixUnitaire.Text);
                              sql_cmd.Parameters.AddWithValue("@Prix_total_HT", total);
                              sql_cmd = new OleDbCommand(txtQuery, sql_con);
                              sql_cmd.ExecuteNonQuery();
                               //ExecuteQuery(txtQuery);
                           }
                       }
                       catch(OleDbException ex)
                       {
                           MessageBox.Show(ex.Source);
                       }



                       try
                       {

                           LoadDB();

                           //ADDITIONNER UNE COLONNE DU DATAGRIDVIEW
                           for (int i = 0; i < dataGridView1.Rows.Count; i++) //Car tu fais une infériorité stricte
                           {
                               total_achat += Convert.ToDecimal(dataGridView1.Rows[i].Cells[4].Value);

                           }
                           TxtTotalCmd.Text = total_achat.ToString();//convertir total_achat en string^pour pouvoir l'afficher dans le textbox
                           TxtDesignation.Text = "";
                           TxtQteCmd.Text = "";
                           TxtPrixUnitaire.Text = "";
                           TxtRefProduit.Text = "";
                           TxtQteCmd.Text = "";
                           //SupDetail_Temp();

                       }

                       catch (OleDbException ex)
                       {
                           MessageBox.Show(ex.Source);
                           sql_con.Close();
                       }
                       finally
                       {
                           sql_con.Close();
                       }

                   }
                   else
                   {
                       MessageBox.Show("Veuillez verifier le stock du produit!!!");
                   }
               }

           }

       }

Quote:

C#

// using (sql_cmd = sql_con.CreateCommand())
{
    string txtQuery = "INSERT INTO Detail_temp (ref_det, qute_det, Designation, Prix_unitaire_HT, Prix_total_HT) VALUES (@ref_det,@qute_det,@Designation,@Prix_unitaire_HT,@Prix_total_HT)";
    sql_cmd.Parameters.AddWithValue("@ref_det", TxtRefProduit.Text);
    sql_cmd.Parameters.AddWithValue("@qute_det", TxtQteCmd.Text);
    sql_cmd.Parameters.AddWithValue("@Designation", TxtDesignation.Text);
    sql_cmd.Parameters.AddWithValue("@Prix_unitaire_HT", TxtPrixUnitaire.Text);
    sql_cmd.Parameters.AddWithValue("@Prix_total_HT", total);
    sql_cmd = new OleDbCommand(txtQuery, sql_con);
    sql_cmd.ExecuteNonQuery();
    //ExecuteQuery(txtQuery);
}

1. Creates a string variable to hold the query;
2. Adds 5 parameters to the sql_cmd variable;
3. Throws the sql_cmd variable away and sets it to a new OleDbCommand instance;
4. Attempts to execute the sql_cmd without adding any parameters to it;

using (OleDbCommand cmd = sql_con.CreateCommand())
{
    cmd.CommandText = "INSERT INTO Detail_temp (ref_det, qute_det, Designation, Prix_unitaire_HT, Prix_total_HT) VALUES (@ref_det,@qute_det,@Designation,@Prix_unitaire_HT,@Prix_total_HT)";
    
    cmd.Parameters.AddWithValue("@ref_det", TxtRefProduit.Text);
    cmd.Parameters.AddWithValue("@qute_det", TxtQteCmd.Text);
    cmd.Parameters.AddWithValue("@Designation", TxtDesignation.Text);
    cmd.Parameters.AddWithValue("@Prix_unitaire_HT", TxtPrixUnitaire.Text);
    cmd.Parameters.AddWithValue("@Prix_total_HT", total);
    
    sql_con.Open();
    cmd.ExecuteNonQuery();
}

Thank you very much to you I try it and I come back to you

and here is my connection

private void setConnection()
     {
         try
         {
             string connetionString = null;
             //connection à la base de donnée avec mot de passe
             connetionString = @"Provider=Microsoft.Jet.OLEDB.4.0;Data source=" + Application.StartupPath + @"\DB_CaisseEnregistreuse.mdb;Persist Security Info=True;Jet OLEDB:Database Password=B@sta08091987";
             sql_con = new OleDbConnection(connetionString);
         }
         catch (Exception ex)
         {
             MessageBox.Show("Erreur de connexion à la base donnée" + ex.Message);
         }


     }

System.Data.OleDb.OleDbException: 'No value given for one or more of the required parameters.'

var body = new
{
    No = tbNo.Text,
    First_name = tbFirstName.Text,
    Last_Name = tbLastName.Text,
    FunctionName = tbFunctionName.Text,
};

string json = JsonConvert.SerializeObject(body);
byte[] data = Encoding.UTF8.GetBytes(json);

WorkersClass _data = new WorkersClass();
_data.E_Tag = string.Empty;
_data.No = tbNo.Text;
_data.First_name = tbFirstName.Text;
_data.Last_Name = tbLastName.Text;
_data.FunctionName = tbFunctionName.Text;

var url = await CreateWorkerAsync(_data);

static async Task<Uri> CreateWorkerAsync(WorkersClass _worker)
{
    string _url = "https://api.businesscentral.dynamics.com/v2.0/SomeFunkyGuid/Sandbox/ODataV4/Company('CRONUS%20NL')/WorkersWebService";//Card Page
    string _userName = "UserName";
    string _wsKey = "Password";
    _client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue(_userName, _wsKey);
    HttpResponseMessage response = await _client.PostAsJsonAsync(_url, _worker);
    response.EnsureSuccessStatusCode();

    // return URI of the created resource.
    return response.Headers.Location;
}

var body = new
{
    E_Tag = string.Empty,     // Unique key
    No = tbNo.Text,
    First_name = tbFirstName.Text,
    Last_Name = tbLastName.Text,
    FunctionName = tbFunctionName.Text,
};


string json = JsonConvert.SerializeObject(body);
byte[] data = Encoding.UTF8.GetBytes(json);

var url = await CreateWorkerAsync(data);

Quote:

C#

string body = "{" + Environment.NewLine +
                    "\"No\":" + tbNo.Text + "," + Environment.NewLine +
                    "\"First_name\":\"" + tbFirstName.Text + "\"," + Environment.NewLine +
                    "\"Last_Name\":\"" + tbLastName.Text + "\"," + Environment.NewLine +
                    "\"FunctionName\":\"" + tbFunctionName.Text + "\"," + Environment.NewLine +
                  "}";

byte[] data = Encoding.ASCII.GetBytes(body);

try
{
    _request.ContentLength = data.Length;

    Stream requestStream = _request.GetRequestStream();
    requestStream.Write(data, 0, data.Length);
    requestStream.Close();

    HttpWebResponse _response = _request.GetResponse() as HttpWebResponse;//Here we get the exception errors 400 or 405
    Console.WriteLine(_response.StatusCode);
}
catch (Exception ex)
{

}

string _userName = "UserName";
string _wsKey = "Password";
byte[] authenticationParameter = Encoding.UTF8.GetBytes(_userName + ":" + _wsKey);
_client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", Convert.ToBase64String(authenticationParameter));

static async Task<Uri> CreateWorkerAsync(WorkersClass _worker)
{
    string _url = "https://api.businesscentral.dynamics.com/v2.0/SomeFunkyGuid/Sandbox/ODataV4/Company('CRONUS%20NL')/WorkersWebService";//Card Page
    string _userName = "UserName";
    string _wsKey = "Password";
    byte[] _authenticationParameter = Encoding.UTF8.GetBytes(_userName + ":" + _wsKey);
    _client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", Convert.ToBase64String(_authenticationParameter));
    HttpResponseMessage response = await _client.PostAsJsonAsync(_url, _worker);
    response.EnsureSuccessStatusCode();

    // return URI of the created resource.
    return response.Headers.Location;
}

listBox1.Items.Clear();
WorkersReadFromAlWebService = new List<WorkerClass>();
string _url = "https://api.businesscentral.dynamics.com/v2.0/SomeFunkyGuid/Sandbox/ODataV4/Company('CRONUS%20NL')/WorkersWebService";//CardPage
           HttpWebRequest _request = (HttpWebRequest)WebRequest.Create(_url);
_request.ContentType = "application/json; charset=utf-8";
_request.Headers["Authorization"] = "Basic " + Convert.ToBase64String(Encoding.GetEncoding("ISO-8859-1").GetBytes("UserName:Password"));
_request.PreAuthenticate = true;
HttpWebResponse _response = _request.GetResponse() as HttpWebResponse;
using (Stream _responseStream = _response.GetResponseStream())
{
    StreamReader _reader = new StreamReader(_responseStream, Encoding.UTF8);
    string _content = _reader.ReadToEnd();

    string _jasonPart = GetJsonPartMultiRecord(_content);

    List<WorkerClass> _jWorkers = JsonConvert.DeserializeObject<List<WorkerClass>>(_jasonPart);

    foreach (var _worker in _jWorkers)
    {
        WorkersReadFromAlWebService.Add(_worker);
        listBox1.Items.Add(_worker.Last_Name + " / " + _worker.First_name + " (No: " + _worker.No + ")");
    }
}

ClearWorker();

I am anoop
I Am anOop
I aM Anoop
I am anoOP
i AM anoop
I Am ANoOP
i aM anOop