String strQry ="INSERT INTO tblVoucherType (VhrTypeCode,moduleCode,transCCode,"+"voucherType,OrderNumber,active,AccountId) "+" values('"+ txtVhrCode.Text+"','"+ ddlModule.SelectedValue.ToString()+"',"+"'"+ ddlTrans.SelectedValue.ToString()+"','"+ txtVhrName.Text+"','"+ btnRadio.SelectedValue+"'"+", '"+ status.Checked+"', '"+ txtAccount.Text+"')";
↧
How can I write this query In parameterize form so That I can prevent sql Injection
↧