Lokesh M

 Profile Answers by Lokesh M Questions by Lokesh M

• Jan 4th, 2013

 

The SQLDataSource methods such as Insert method is associated with ad Hoc SQL queries or stored procedures.

When SQLDataSource is invoked via Web control:
- A database connection is established,
- OnInserting method is called.
- DbCommand object is built using the InsertCommand text and InsertParameters properties,
- DbCommand object is executed against the underlying connected database.
- OnInserted method is called to raise the Inserted event.

As a precautionary measure, You need to use Filtering event and validate the insert parameter values before executing the insert query.