Databases
StackOverflow2013
Postsdbo
POUse of SqlDataSource From Non-Control Situations
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POUse of SqlDataSource From Non-Control Situations
    primarykey
    data
    text
    <p>As part of my common utilities I used in all my line of business applications, I have this code...</p> <pre><code>using System.Web.UI.WebControls; public class Database { /// &lt;summary&gt; /// Creates a DataView object using the provided query and an SqlDataSource object. /// &lt;/summary&gt; /// &lt;param name="query"&gt;The select command to perform.&lt;/param&gt; /// &lt;returns&gt;A DataView with data results from executing the query.&lt;/returns&gt; public static DataView GetDataView(string query) { SqlDataSource ds = GetDBConnection(); ds.SelectCommand = query; DataView dv = (DataView)ds.Select(DataSourceSelectArguments.Empty); return dv; } /// &lt;summary&gt; /// Creates a SqlDataSource object with initialized connection string and provider /// &lt;/summary&gt; /// &lt;returns&gt;An SqlDataSource that has been initialized.&lt;/returns&gt; public static SqlDataSource GetDBConnection() { SqlDataSource db = new SqlDataSource(); db.ConnectionString = GetDefaultConnectionString(); //retrieves connection string from .config file db.ProviderName = GetDefaultProviderName(); //retrieves provider name from .config file return db; } } </code></pre> <p>Then, in my projects, to retrieve data from databases I'll have some code like..</p> <pre><code>DataView dv=Database.GetDataView("select mycolumn from my table"); //loop through data and make use of it </code></pre> <p>I have taken some heat from people for using SqlDataSource in this manner. People don't seem to like that I'm using a Web control purely from code instead of putting it on an ASPX page. It doesn't look right to them, but they haven't been able to tell me a downside. So, is there a downside? This is my main question. Because if there's a lot of downsides, I might have to change how I'm doing many internal applications I've developed.</p> <p>My Database class even works from non-ASP.NET situations, so long as I add the System.Web assembly. I know it's a slight increase in package size, but I feel like it's worth it for the type of application I'm writing. Is there a downside to using SqlDataSource from say a WPF/Windows Forms/Console program?</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. USmason
    1. USmason
    plurals
    1. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POUse of SqlDataSource From Non-Control Situations
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POUse of SqlDataSource From Non-Control Situations
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POUse of SqlDataSource From Non-Control Situations
      1. This table or related slice is empty.
      1. VTUpMod
    1. COIs this code a simplified version of your real code, or do you never pass parameters to your query? Because the code you've posted seems to invite [SQL Injection](http://www.troyhunt.com/2013/07/everything-you-wanted-to-know-about-sql.html) if you need to pass parameters.
      singulars
      1. POUse of SqlDataSource From Non-Control Situations
      1. USRichard Deeming
    2. CO@RichardDeeming Simplified, I have other code that scrubs for SQL Injection. I suppose I should mention that this code is used for internal line of business applications inside our 60 person company. It's not publicly accessible.
      singulars
      1. POUse of SqlDataSource From Non-Control Situations
      1. USmason
    3. COAnd there's no possibility of internal users trying to hack your databases, or malware getting inside your network, right? http://www.troyhunt.com/2013/10/your-corporate-network-is-already.html
      singulars
      1. POUse of SqlDataSource From Non-Control Situations
      1. USRichard Deeming
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload