best practice connecting directly to sqlserver

Question

best practice connecting directly to sqlserver

deckelmouck 191

hello together,
i want to connect from multiple android devices to a ms sqlserver database in an internal environment only using wlan and no internet connection. are there any best practices for doing that?
with our old devices (win6.5) we use system.data.SqlClient and SqlConnection. Reading data via SqlCommand and Execute.. (Reader, Scalar, NonQuery e.g.).
all I get for online services is to use a webservice, but i want to try it directly and to be always up to date.
Thanks in advance!

Anonymous

2020-11-25T13:59:33.317+00:00

First of all, connect to sqlserver directly, it is not best practice, for security, using web services is an good choose. If you just want to connect to the sqlserver directly, you can create an dependence service, in the specific platform, you can use System.Data.SqlClient to connect to the DB like this thread https://stackoverflow.com/questions/37873020/accessing-directly-a-sql-server-database-in-xamarin-forms

Accepted answer

0 additional answers

Your answer

Anonymous

2020-11-25T13:59:33.317+00:00

First of all, connect to sqlserver directly, it is not best practice, for security, using web services is an good choose. If you just want to connect to the sqlserver directly, you can create an dependence service, in the specific platform, you can use System.Data.SqlClient to connect to the DB like this thread https://stackoverflow.com/questions/37873020/accessing-directly-a-sql-server-database-in-xamarin-forms

Answer 1

deckelmouck 191

hello,
tried two solutions:

first: according to stackoverflow article from 2016 with interface and use service from pcl to xamarin android function. works :)
second: only in pcl, use NETStandard.Library (2.0.3) and add NuGet package System.Data.SqlClient(4.8.2)
now you get simple access to mssqlserver ;)

and yes, I know, that this is not a secure way to get access to a sql server database on an internet connection, but i think it works for my purpose using it only on internal devices without access to public internet.

Regards

Karen Payne MVP 35,586 Reputation points Volunteer Moderator

2020-12-19T14:20:25.913+00:00
Best to use a parameter whenever there is a need for values in the WHERE clause to avoid

Unbalanced apostrophes

SQL Injection.

Proper data typing

The following can also be done with Add method besides AddWithValue.

sqlCommand.Parameters.AddWithValue("@BusinessEntity", BusinessEnityId)
deckelmouck 191 Reputation points

2020-12-21T10:01:21.127+00:00

Thank you for this advice.

this was only for testing, but yeah, it should be no standard ;)

Share via

best practice connecting directly to sqlserver

0 additional answers

Your answer