Sql insert not working

[hsingh1981]

Hi all i get an error msg in my vb.net 2003. can anyone see problem with my sql statement?

        sql = "INSERT INTO T_AnnualLeave (StaffID, LeaveStart, LeaveEnd, Notes, LeaveDays) "
        sql = sql + "VALUES('" & staffid & "',#" & startdate & "#, #" & enddate & "# , '" & notes & "', '" & days & "')"

regards

farouq

 

[ca8msm]

I see lots of problems.

1. You haven't told us what the error message says
2. The # key around dates isn't needed in SQL Server
3. SQL Injection


[!]
-------------------------------------------------------

Mark,

Join me at the new IT Community of the 21st Century: [!][URL unfurl="true"]http://lessthandot.com[/!][/url]

[/!]

 

[hsingh1981]

Hi thanks for replying....i finally sussed it out. You're absolutely right regarding # is not needed in sql server.