Executing SQL Commands: SELECT, INSERT, UPDATE, DELETE

CRUD operations with ADO.NET

Posted by Rodrigo Castro on December 21, 2024

ADO.NET lets you run any SQL against your database. Here’s how to do basic CRUD (Create, Read, Update, Delete).

🔍 SELECT (Read Data)

1
2
3
4
5
6
7
string sql = "SELECT Id, Name FROM Users";
using (SqlCommand cmd = new SqlCommand(sql, conn))
using (SqlDataReader reader = cmd.ExecuteReader())
{
    while (reader.Read())
        Console.WriteLine($"{reader["Id"]}: {reader["Name"]}");
}

➕ INSERT (Add Data)

1
2
3
4
5
6
string sql = "INSERT INTO Users (Name) VALUES (@name)";
using (SqlCommand cmd = new SqlCommand(sql, conn))
{
    cmd.Parameters.AddWithValue("@name", "Bob");
    cmd.ExecuteNonQuery();
}

✏️ UPDATE (Modify Data)

1
2
3
4
5
6
7
string sql = "UPDATE Users SET Name = @name WHERE Id = @id";
using (SqlCommand cmd = new SqlCommand(sql, conn))
{
    cmd.Parameters.AddWithValue("@name", "Charlie");
    cmd.Parameters.AddWithValue("@id", 1);
    cmd.ExecuteNonQuery();
}

🗑️ DELETE (Remove Data)

1
2
3
4
5
6
string sql = "DELETE FROM Users WHERE Id = @id";
using (SqlCommand cmd = new SqlCommand(sql, conn))
{
    cmd.Parameters.AddWithValue("@id", 1);
    cmd.ExecuteNonQuery();
}

⚠️ Always Use Parameters

  • Prevents SQL injection
  • Handles data types safely

Next: Introduction to Entity Framework!