|
|
Review :
This style of programming is easier to type. But its not a good programming practice to manually use quotes, unquotes in SQL statements. Aside from adding difficulty in debugging, type checking is not supported which will make your code more robust.
Example: cmd.Parameters.Add("@titleID", SqlDbType.String)
cmd.Parameters["@titleID"].Value = txtTitleID.Text;
This way, you have a strong type checking and a more maintainable code. |