student.cs

it is beautiful was lit

using System;
using System.Collections.Generic;
using System.Text;
using System.Collections;

namespace Console
{
    public class Student
    {
        private string _dbConnStr = string.Empty;

        public Student(string dbConnStr)
        {
            this._dbConnStr = dbConnStr;
        }

        public ICollection<ArrayList> GetDataByName(string Name)
        {
            List<ArrayList> list = new List<ArrayList>();

            using (System.Data.SqlClient.SqlConnection conn = new System.Data.SqlClient.SqlConnection(this._dbConnStr))
            {
                string sqlText = "SELECT StudentID, Name, ClassID FROM dbo.Student WHERE Name LIKE '%" + Name + "%';";

                System.Data.SqlClient.SqlCommand sqlCmd =
                    new System.Data.SqlClient.SqlCommand(sqlText, conn);

                conn.Open();

                System.Data.SqlClient.SqlDataReader sqlDr = sqlCmd.ExecuteReader();

                while (sqlDr.Read())
                {
                    ArrayList fieldValues = new ArrayList();

                    fieldValues.Add(sqlDr["StudentID"]);
                    fieldValues.Add(sqlDr["Name"]);
                    fieldValues.Add(sqlDr["ClassID"]);

                    list.Add(fieldValues);
                }

                sqlDr.Close();
            }

            return list;
        }

        public void Insert(string StudentID, string Name)
        {
            using (System.Data.SqlClient.SqlConnection conn = new System.Data.SqlClient.SqlConnection(this._dbConnStr))
            {
                string sqlText = "INSERT INTO Student (StudentID, Name, ClassID) VALUES(@StudentID, @Name, @StudentID)";

                System.Data.SqlClient.SqlCommand sqlCmd =
                    new System.Data.SqlClient.SqlCommand(sqlText, conn);

                sqlCmd.Parameters.Add(
                    new System.Data.SqlClient.SqlParameter("@StudentID", StudentID));
                sqlCmd.Parameters.Add(
                    new System.Data.SqlClient.SqlParameter("@Name", Name));

                conn.Open();

                sqlCmd.ExecuteNonQuery();
            }
        }
    }
}