This is the URL. Appreciate any suggestions.
http://www.xxx.com.au/wizardreport.aspx?search=true&State=All&Location=All&Hazard=All&Priority=All&Status=All&Risk=All
Here is the Code
ICollection CreateDataSource()
{
SqlConnection myConnection =newSqlConnection(ConfigurationSettings.AppSettings["DSN"]);
SqlDataAdapter myAdapter =newSqlDataAdapter();
SqlParameter prm;
SqlCommand myCmd =newSqlCommand();
string SQL ="SELECT * FROM [Inspection] INNER JOIN location ON Inspection.LocationID = location.LocationID WHERE ([location].[LocationID]
= ISNULL(@Location,[location].[LocationID]) AND [Location].[LASurvey1] = ISNULL(@State,[Location].[LASurvey1])AND [inspection].[RSurvey5] = ISNULL(@Hazard,[inspection].[RSurvey5]) AND [inspection].[RSurvey15] = ISNULL(@Priority,[inspection].[RSurvey15]) AND
[inspection].[RSurvey8] = ISNULL(@Status,[inspection].[RSurvey8])AND [inspection].[RSurvey13] = ISNULL(@Risk,[inspection].[RSurvey13])) ";
// Location
prm =
newSqlParameter("@Location",SqlDbType.VarChar, 100);
prm.Direction =
ParameterDirection.Input;
if (Request.QueryString["Location"]
== "All")
{
prm.Value =
DBNull.Value;
}
else
{
prm.Value = Request.QueryString[
"Location"];
}
myCmd.Parameters.Add(prm);
// Priority
prm =
newSqlParameter("@Priority",SqlDbType.VarChar, 100);
prm.Direction =
ParameterDirection.Input;
if (Request.QueryString["Priority"]
== "All")
{
prm.Value =
DBNull.Value;
}
else
{
prm.Value = Request.QueryString[
"Priority"];
}
myCmd.Parameters.Add(prm);
// State
prm =
newSqlParameter("@State",SqlDbType.VarChar, 100);
prm.Direction =
ParameterDirection.Input;
if (Request.QueryString["State"]
== "All")
{
prm.Value =
DBNull.Value;
}
else
{
prm.Value = Request.QueryString[
"State"];
}
myCmd.Parameters.Add(prm);
//Hazard
prm =
newSqlParameter("@Hazard",SqlDbType.VarChar, 100);
prm.Direction =
ParameterDirection.Input;
if (Request.QueryString["Hazard"]
== "All")
{
prm.Value =
DBNull.Value;
}
else
{
prm.Value = Request.QueryString[
"Hazard"];
}
myCmd.Parameters.Add(prm);
//Status
prm =
newSqlParameter("@Status",SqlDbType.VarChar, 100);
prm.Direction =
ParameterDirection.Input;
if (Request.QueryString["Status"]
== "All")
{
prm.Value =
DBNull.Value;
}
else
{
prm.Value = Request.QueryString[
"Status"];
}
myCmd.Parameters.Add(prm);
//Risk
prm =
newSqlParameter("@Risk",SqlDbType.VarChar, 100);
prm.Direction =
ParameterDirection.Input;
if (Request.QueryString["Risk"]
== "All")
{
prm.Value =
DBNull.Value;
}
else
{
prm.Value = Request.QueryString[
"Risk"];
}
myCmd.Parameters.Add(prm);
myCmd.CommandText = SQL;
myCmd.Connection = myConnection;
myAdapter.SelectCommand = myCmd;
DataTable dt =newDataTable();
myAdapter.Fill(dt);
Session[
"Source"] = dt;
DataView dv =newDataView(dt);
return dv;
}