Context.User.Identity.Name

[tkikkert]

I have created a login page and everything works fine. Now I want to do a select in a GridView based on the userid matching Context.User.Identity.Name. I've tried every way I can think of to create the select and most of the times I get an error - 'the server tag is not well formed'. I've tried many combinations of the following:

SelectCommand="SELECT [EmpName] FROM [Expenses] WHERE [UserName]= '" + currentUserID + "'"

or

SelectCommand="SELECT [EmpName] FROM [Expenses] WHERE [UserName]= '" + Context.User.Identity.Name + "'"

If I actually put a username in, it works fine. Any help would be appreciated.

Thanks

 

[jmeckley]

start by using a parameterized query, not injected sql. the error doesn't match the code. This usually means the displayed error is a side effect of an other error.

Jason Meckley
Programmer
Specialty Bakers, Inc.

 

[tkikkert]

Thanks for the reply Jason. I actually managed to Google about using parameters. If I put a DefaultValue in the parameter, it works fine but I can't figure out how to load the context.user.Identy.Name into the parameter. I assume it has to be done in a sub. Could you give me an example of how you would do this in vb?

 

[tkikkert]

Found the solution to my problem. Thanks again, Jason.

 

[jbenson001]

please post what you found so it may help someone else with the same problem in the future.