Developing a search screen [C# windows application]

Question

hi, i have a two panels on a winorm one is "FIND CRITERIA" and the second is "FOUND DATA", what i want to do is to write a simple sql that can take argument , because their are 8 different search criterias that a user can enter in order to refine a search. 1. date 2. number 3. account now the user can enter the all three or either one of the above as soon as the input parameterz increase the search should be refined . thanks in advance any help

naura pax · Answer

Thats even better you don't have to use stored procedure. now as i posted earlier you will end up with a string whereClause which will have conditions for only those controls that you want them ( dates will come all the time and comboboxes will be considered only when anything is selected in them). now you just have to append this string to your select query: "Select a,b,c... from t1 join... " + whereClause.ToString(); simple isn't it?

naura pax · Answer

if it worked then accept it please :) :)

faraz akram · Answer

ok thanks a lot, it really worked... regards faraz akram

faraz akram · Answer

ok but i cannot use stored procedure am only allowed to use a single select query that have 8 arguments and those eight may or may not be filled all the time at time only one is passed at times 2 are passed at times all are passed thanks in advance

naura pax · Answer

hi, you can write a dynamic sql query where you declare a string or StringBuilder object and append clause into it depending upon selected criteria either on a button click event (if you have search button) or on the Enter event of the control which is to be filled eg: StringBuilder whereclause=new StringBuilder(); if(cmbAccountName.SElectedIndex>-1) { if (whereClause.Length==0) whereClause.Append(" Where "); else whereClause.Append(" And")"; whereClause.Append(" AccountID=" + cmbAccountName.SelectedValue); } and so on ... for all criteria. Then pass this string variable in your stored procedure where you excute query by exec() or sp_executesql.