SQL Server Invalid column name when adding string value

Question

I\'m new to SQL Server

I\'ve created my table like this:

CREATE TABLE Accidents (
     Id INT NOT NULL PRIMARY KEY IDENTITY,
     GUID VARCHAR(100),         


        

Answer 1

You need quotes around your strings. You're just directly substituting in the values, so SQL is trying to parse them as columns.

SqlCommand cmd = new SqlCommand("INSERT INTO Accidents (GUID,Latitude,Longitude,PhotoName)    
       VALUES ('" + GUID + "','" + latitude + "','" + longitude + "','" + photoName + "')", con);

You should note, however, that this is extremely insecure code. It's very prone to SQL injection. Try using paramaterized queries instead.