How can we fetch the data in the table according to the table name entered in the textbox? (in C# or asp.net)

Question

How can we fetch the data in the table according to the table name entered in the textbox? (in C# or asp.net)
E.g:
(select * from users)
I want to use - textbox.text instead of "users".
Like (select * from textbox.text).

Thank you in advance for your contribution.

Answer 1

-get database table name using textbox for c# or asp.net
-mysql or mssql

Answer 2

Something like dynamically SQL?

string sql = "SELECT * FROM " & textBox.Text;
var cmd = new SqlCommand(sql, conn))
var reader = cmd.ExecuteReader();
while (reader.Read())
{  //...

But it's dangerous because it allows SQL Injection: https://en.wikipedia.org/wiki/SQL_injection

Answer 3

Thank you very much for your suggestions and advice, you have kept me informed.

By the way, I made some minor changes to the code and now it works.

string sqlCommand = $"SELECT * FROM {TextBox1.Text}";