Username Parameter In Sql Script c# Web Project Visual Studio

Question

I have a grid view in a web application in visual studio with a sql query attached to it. How do i pass the Username the person has logged in with into a parameter in the query

Answer 1

You need to insert the user's input as a variable into the SQL Query using command.Parameters.AddWithValue(). Quick Example..

var command = new SqlCommand("INSERT INTO Users (Username) VALUES (@Username)");

command.Parameters.AddWithValue("@Username", txtUsername.Text);

command.ExecuteNonQuery();

Answer 2

You get the username the user is logged in with (in Windows) by executing:

String userName = Environment.UserName;

In your SQL query, you would use this variable like this:

String SQLQuery = "SELECT * FROM [YourTable] WHERE colUserName = '" + userName + "';";

If you are looking for the username the person is logged into SQL-Server with (for example) you would use:

SELECT system_user;

to get:

String SQLQuery = "SELECT * FROM [YourTable] WHERE colUserName = system_user;";