tablename

What is the safe way how to put table name as parameter into SQL query? You cannot put table name as parameter using PreparedStatement . Concatenating string to execute query with dynamic table name using Statement is possible, however it is not recommended because of risk of SQL injection. What is the best approach to do this? I would try to solve the design problem, so you don't have to set the table name dynamically. If this is not possible, I would go for a design where you manage a list of available tables and users pick one from there, BY ID, so you can retrieve the real table name from

I'm trying to create a table with a name based on the current year and month( 2011-09 ), but MySQL doesn't seem to like this. SET @yyyy_mm=Year(NOW())+'-'+Month(NOW()); CREATE TABLE `survey`.`@yyyy_mm` LIKE `survey`.`interim`; SHOW TABLES IN `survey`; +-----------+ | interim | +-----------+ | @yyyy_mm | +-----------+ If I do CREATE TABLE; without the ticks around @yyyy_mm , I get a generic syntax error. @yyyy_mm resolves to 2020 . You should be able to do something like this: SET @yyyy_mm=DATE_FORMAT(now(),'%Y-%m'); SET @c = CONCAT('CREATE TABLE `survey`.`',@yyyy_mm, '` LIKE `survey`.`interim`

Is there a way to do what this code did in EF Core RC 2? protected override void OnModelCreating(ModelBuilder modelBuilder) { modelBuilder.Conventions.Remove<PluralizingTableNameConvention>(); } Morteza Manavi There is no convention for this as of EF RC2 build. This is from EF Core team: In past pre-release of EF Core, the table name for an entity was the same as the entity class name. In RC2 we now use the name of the DbSet property. If no DbSet property is defined for the given entity type, then the entity class name is used. Now if you want to revert back to the RC1 naming conventions for

I have a situation, I have a Access table named Gas Flow Rates that I want to add records. When I try to run my insert query for a similar table Common Station , I get the following error: "error hy000: syntax error, in query incomplete query clause" Code is: using System; using System.Data.Odbc; class MainClass { static void Main(string[] args) { string connectionString = "Dsn=Gas_meter"; string sqlins = ""; OdbcConnection conn = new OdbcConnection(connectionString); OdbcCommand cmdnon = new OdbcCommand(sqlins, conn); conn.Open(); try { cmdnon.CommandText = "INSERT INTO 'Common station' (

I want to loop through all my tables to count rows in each of them. The following query gets me an error: DO $$ DECLARE tables CURSOR FOR SELECT tablename FROM pg_tables WHERE tablename NOT LIKE 'pg_%' ORDER BY tablename; tablename varchar(100); nbRow int; BEGIN FOR tablename IN tables LOOP EXECUTE 'SELECT count(*) FROM ' || tablename INTO nbRow; -- Do something with nbRow END LOOP; END$$; Errors: ERROR: syntax error at or near ")" LINE 1: SELECT count(*) FROM (sql_features) ^ QUERY: SELECT count(*) FROM (sql_features) CONTEXT: PL/pgSQL function inline_code_block line 8 at EXECUTE statement

I want to get list of records from an entity model (I'm using EF version 5) with a particular accountID. I'm being supplied with the tableName string (this has to be dynamic) and the accountID. I'm trying the following 2 methods but none of them is working (giving me errors on the IQueryable object 'table': PropertyInfo info = _db.GetType().GetProperty(tableName); IQueryable table = info.GetValue(_db, null) as IQueryable; var query = table.Where(t => t.AccountID == accID) .Select(t => t); List <object> recList = ( from records in table where records.AccountID == accID select records).ToList