System.Web.UI.WebControls Namespace SqlDataSource Class
.NET Framework version 2.0
Sets or retrieves the SQL string that the SqlDataSource control uses to update data in the underlying database.
| Inline |
<asp:SqlDataSource updatecommand = strSQL ... > |
| Script |
SqlDataSource.UpdateCommand [ = strSQL ] |
| strSQL |
An SQL string that the SqlDataSource uses to update data. |
The property is read/write with no default value.
Because different database products use different varieties of SQL, the syntax of the SQL string depends on the current ADO.NET provider being used, which is identified by the ProviderName property. If the SQL string is a parameterized query or command, the placeholder of the parameter also depends on the ADO.NET provider being used. For example, if the provider is the System.Data.SqlClient, which is the default provider for the SqlDataSource class, the placeholder of the parameter is '@parameterName'. However, if the provider is set to the System.Data.Odbc or System.Data.OleDb, the placeholder of the parameter is '?'. For more information on parameterized SQL queries and commands, see Using Parameters with the SqlDataSource Control.
The UpdateCommand property can be an SQL string or the name of a stored procedure, if the data source supports stored procedures.
The UpdateCommand property delegates to the UpdateCommand property of the SqlDataSourceView object that is associated with the SqlDataSource control.
NOTE: For security purposes, the UpdateCommand property is not stored is view state. Because it is possible to decode the contents of view state on the client, storing sensitive information about the database structure in view state could result in an information disclosure vulnerability.
